cbcvebase.
CVE-2011-5093
published 2012-06-04

CVE-2011-5093: Best Practical Solutions RT 4.x before 4.0.6 does not properly implement the DisallowExecuteCode option, which allows remote authenticated users to bypass…

PriorityP335medium6.5CVSS 2.0
AVNACLAuSCPIPAP
EPSS
2.09%
79.2th percentile
Best Practical Solutions RT 4.x before 4.0.6 does not properly implement the DisallowExecuteCode option, which allows remote authenticated users to bypass intended access restrictions and execute arbitrary code by leveraging access to a privileged account, a different vulnerability than CVE-2011-4458 and CVE-2011-5092.

Affected

84 ranges· showing 25
VendorProductVersion rangeFixed in
bestpracticalrt——
bestpracticalrt——
bestpracticalrt——
bestpracticalrt——
bestpracticalrt——
bestpracticalrt——
bestpracticalrt——
bestpracticalrt——
bestpracticalrt——
bestpracticalrt——
bestpracticalrt——
bestpracticalrt——
bestpracticalrt——
bestpracticalrt——
bestpracticalrt——
bestpracticalrt——
bestpracticalrt——
bestpracticalrt——
bestpracticalrt——
bestpracticalrt——
bestpracticalrt——
bestpracticalrt——
bestpracticalrt——
bestpracticalrt——
bestpracticalrt——

CVSS provenance

nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
osv6.8MEDIUM
vendor_debian6.8MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.