CVE-2010-5108

State: Published
Severity: Not scored
Published: Nov 13, 2019
Updated: Aug 7, 2024
Reserved: Apr 30, 2012

Description

Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permissions.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
tractrac	0.11.6Affected

References

https://security-tracker.debian.org/tracker/CVE-2010-5108
https://access.redhat.com/security/cve/cve-2010-5108
http://www.openwall.com/lists/oss-security/2013/02/13/2

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.