The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Unspecified vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13, when using the Apache::Session::File session store, allows remote attackers to obtain sensitive information (user preferences and caches) via unknown vectors, related to a "limited session re-use."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade request-tracker4 | Jul 30, 2024 | Aug 23, 2013 |
| Freebsd | — | Upgrade rt40Upgrade rt38 | Dec 10, 2025 | May 23, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub