CVE:CVE-2015-1165
CNNVD:CNNVD-201503-179
Best Practical Solutions Request Tracker（RT）是美国Best Practical Solutions公司的一套企业级开源问题跟踪系统。该系统具有Bug跟踪、客户服务、自定义工作流等功能。
Best Practical Solutions RT中存在安全漏洞。远程攻击者可利用该漏洞获取敏感的RSS源地址和票据数据。以下版本受到影响：Best Practical Solutions RT 3.8.8版本至3.x版本，4.0.23之前4.x版本，4.2.10之前4.2.x版本。
solution:Upgrade debian debian_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade fedoraproject fedora to a higher version than 21,22,and avoid the version 21,22; Upgrade bestpractical request_tracker to a higher version than 3.8.8,3.8.9,3.8.10,3.8.11,3.8.12,3.8.13,3.8.14,3.8.15,3.8.16,3.8.17,4.0.0,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,4.0.7,4.0.8,4.0.9,4.0.10,4.0.11,4.0.12,4.0.13,4.0.14,4.0.15,4.0.16,4.0.17,4.0.18,4.0.19,4.0.20,4.0.21,4.0.22,4.2.0,4.2.1,4.2.2,4.2.3,4.2.4,4.2.5,4.2.6,4.2.7,4.2.8,4.2.9,and avoid the version 3.8.8,3.8.9,3.8.10,3.8.11,3.8.12,3.8.13,3.8.14,3.8.15,3.8.16,3.8.17,4.0.0,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,4.0.7,4.0.8,4.0.9,4.0.10,4.0.11,4.0.12,4.0.13,4.0.14,4.0.15,4.0.16,4.0.17,4.0.18,4.0.19,4.0.20,4.0.21,4.0.22,4.2.0,4.2.1,4.2.2,4.2.3,4.2.4,4.2.5,4.2.6,4.2.7,4.2.8,4.2.9