Cross-site scripting (XSS) vulnerability in the cryptography interface in Request Tracker (RT) before 4.2.12 allows remote attackers to inject arbitrary web script or HTML via a crafted public key.

Security fix for CVE-2015-5475

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that Request Tracker, an extensible trouble-ticket tracking system is susceptible to a cross-site scripting attack via the user and group rights management pages (CVE-2015-5475 ) and via the cryptography interface, allowing an attacker with a carefully-crafted key to inject JavaScript into RT's user interface.
Installations which use neither GnuPG nor S/MIME are unaffected by the second cross-site scripting vulnerability.

Best Practical reports :

RT 4.0.0 and above are vulnerable to a cross-site scripting (XSS) attack via the user and group rights management pages. This vulnerability is assigned CVE-2015-5475. It was discovered and reported by Marcin Kopec at Data Reliance Shared Service Center.

RT 4.2.0 and above are vulnerable to a cross-site scripting (XSS) attack via the cryptography interface. This vulnerability could allow an attacker with a carefully-crafted key to inject JavaScript into RT's user interface. Installations which use neither GnuPG nor S/MIME are unaffected.

ID	Name	Product	Family	Severity
85672	Fedora 22 : rt-4.2.12-1.fc22 (2015-13718)	Nessus	Fedora Local Security Checks	medium
85671	Fedora 21 : rt-4.2.12-1.fc21 (2015-13664)	Nessus	Fedora Local Security Checks	medium
85638	Fedora 23 : rt-4.2.12-1.fc23 (2015-13641)	Nessus	Fedora Local Security Checks	medium
85388	Debian DSA-3335-1 : request-tracker4 - security update	Nessus	Debian Local Security Checks	medium
85368	FreeBSD : RT -- two XSS vulnerabilities (83b38a2c-413e-11e5-bfcf-6805ca0b3d42)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2015-6506

medium

Tenable Plugins

medium

medium

medium

medium

medium