{"id":"CVE-2012-6578","details":"Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled with a \"Sign by default\" queue configuration, uses a queue's key for signing, which might allow remote attackers to spoof messages by leveraging the lack of authentication semantics.","modified":"2026-04-10T03:42:35.722925Z","published":"2013-07-24T12:01:45Z","references":[{"type":"ADVISORY","url":"http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html"},{"type":"FIX","url":"http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html"}],"schema_version":"1.7.5"}