{"id":"CVE-2012-4731","details":"FAQ manager for Request Tracker (RTFM) before 2.4.5 does not properly check user rights, which allows remote authenticated users to create arbitrary articles in arbitrary classes via unknown vectors.","modified":"2026-04-10T03:42:31.080465Z","published":"2012-11-11T13:00:59Z","references":[{"type":"ADVISORY","url":"http://secunia.com/advisories/51062"},{"type":"ADVISORY","url":"http://secunia.com/advisories/51111"},{"type":"ADVISORY","url":"http://www.debian.org/security/2012/dsa-2568"},{"type":"WEB","url":"http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html"},{"type":"WEB","url":"http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000215.html"}],"schema_version":"1.7.5"}