VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Jul 24, 2013· Updated Apr 29, 2026

CVE-2012-6580

CVE-2012-6580

Description

Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled, does not ensure that the UI labels unencrypted messages as unencrypted, which might make it easier for remote attackers to spoof details of a message's origin or interfere with encryption-policy auditing via an e-mail message to a queue's address.

Affected products

17
  • Bestpractical/Request Tracker17 versions
    cpe:2.3:a:bestpractical:request_tracker:3.8.10:*:*:*:*:*:*:*+ 16 more
    • cpe:2.3:a:bestpractical:request_tracker:3.8.10:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:3.8.11:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:3.8.12:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:3.8.13:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:3.8.14:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:3.8.3:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:3.8.4:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:3.8.7:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:3.8.9:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:bestpractical:request_tracker:4.0.7:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.