Security Update for Request Tracker 4
Summary
DLA-987-1: request-tracker4 - security update. Affects request-tracker4 versions < 4.0.7-5+deb7u5. Fixed in 4.0.7-5+deb7u5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Request Tracker is an extensible trouble-ticket tracking system that allows organizations to efficiently manage and track customer support requests. It provides a web-based interface for users to submit and track tickets, as well as various features for administrators to manage and prioritize tickets. However, several vulnerabilities have been discovered in Request Tracker 4 that could potentially compromise the security and integrity of the system.
Vulnerability Detail
The vulnerabilities in Request Tracker 4 include:
-
Cross-Site Scripting (XSS) Attack (CVE-2016-6127): If an attacker uploads a malicious file with a specific content type, they can execute arbitrary scripts in the context of the user's browser. This can lead to unauthorized access, data theft, or other malicious activities. The fix for this vulnerability addresses all existing and future uploaded attachments.
-
Timing Side-Channel Attacks for User Passwords (CVE-2017-5361): Request Tracker 4 is vulnerable to timing side-channel attacks, which can be used to extract user passwords. This can result in unauthorized access to user accounts and potential data breaches.
-
Information Leak of CSRF Verification Tokens (CVE-2017-5943): If a user is tricked into visiting a specially crafted URL by an attacker, Request Tracker 4 can leak CSRF verification tokens. This can allow attackers to perform unauthorized actions on behalf of the user.
-
Remote Code Execution Vulnerability in Dashboard Subscription Interface (CVE-2017-5944): A privileged attacker can exploit this vulnerability by using carefully-crafted saved search names to execute arbitrary code. This can lead to unauthorized access, data manipulation, or other malicious activities. The fix for this vulnerability addresses all existing and future saved searches.
Additionally, this update also works around a denial of service vulnerability (CVE-2015-7686) in Email::Address, which could impact the availability of Request Tracker 4.
How To Fix
Minimum fixed version
4.0.7-5+deb7u5
This is the first release that contains the fix.
sudo apt-get install --only-upgrade request-tracker4Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no specific workarounds mentioned for these vulnerabilities. However, it is advisable to implement general security best practices such as keeping software and systems up to date, using strong and unique passwords, and regularly monitoring and auditing system logs for any suspicious activities.
Conclusion
Request Tracker 4 is affected by multiple vulnerabilities, including XSS, timing side-channel attacks, information leak, and remote code execution. It is crucial to upgrade the request-tracker4 package to the latest version and apply necessary security updates to protect against these vulnerabilities. Regularly monitoring for security advisories and following best practices can help maintain the security of your Request Tracker installation.
See every vulnerability recorded for request-tracker4 →
FAQ
Request Tracker is an extensible trouble-ticket tracking system that helps organizations manage and track customer support requests.
The consequences of these vulnerabilities include unauthorized access to user accounts, data theft, remote code execution, and potential denial of service attacks.
No, installations that use the AlwaysDownloadAttachments config setting are not affected by the XSS vulnerability.
To upgrade the request-tracker4 package, follow the standard package upgrade process for your operating system. Ensure that you have the latest security updates applied.
There are no specific workarounds mentioned for these vulnerabilities. However, implementing general security best practices can help mitigate the risk.
Related vulnerabilities
Recent vulnerabilities recorded for request-tracker4.
