Name: CVE-2024-3262: Exposure of Sensitive Information to an Unauthorized Actor
Creator: Rapid7
Published: 2024-04-04T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2024-3262, CWE-200, CVSS 5.5, EPSS 0.00016

Information exposure vulnerability in RT software affecting version 4.4.1. This vulnerability allows an attacker with local access to the device to retrieve sensitive information about the application, such as vulnerability tickets, because the application stores the information in the browser cache, leading to information exposure despite session termination.

CVSS Details

CVSS 3.1 Base Score: 5.5
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade request-tracker5Upgrade request-tracker4	May 2, 2025	Apr 4, 2024
Freebsd	—	Upgrade rt50	Jul 4, 2024	Jul 4, 2024
Ubuntu	—	Upgrade rt5-fcgi (Ubuntu Pro)Upgrade rt5-standaloneUpgrade request-tracker5Upgrade rt5-fcgiUpgrade rt5-standalone (Ubuntu Pro)Upgrade request-tracker5 (Ubuntu Pro)	Jul 17, 2025	Apr 4, 2024

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence