CVE-2011-1007: n/a vulnerability

CVE-2011-1007: Best Practical Solutions RT before 3.8.9 does not perform certain redirect actions upon a login, which allo...

Best Practical Solutions RT before 3.8.9 does not perform certain redirect actions upon a login, which allows physically proximate attackers to obtain credentials by resubmitting the login form via the back button of a web browser on an unattended workstation after an RT logout.

UnknownCVSS not scoredNot KEV-listedUpdatedAug 6, 2024, 22:14 UTC (UTC+00:00)

Security readout for executives and security teams

RT installations before 3.8.9 could leave login credentials recoverable from an unattended browser session after logout. The threat is narrow: someone must have physical access to the same workstation. Shared desks, kiosks, helpdesk terminals, and poorly locked workstations carry the most business risk. Exposure is likely limited to organizations running RT before 3.8.9, especially on shared, kiosk, helpdesk, or unlocked workstations. Internet exposure alone is not the key condition described by the CVE. Treat as a targeted credential-exposure issue, not a broad remote compromise. Prioritize upgrade if legacy RT is still used on shared or unlocked workstations; otherwise handle through normal legacy application remediation. Mitigation focus: Upgrade RT to 3.8.9 or a later vendor-supported release.; Use distribution packages that include the RT 3.8.9-era fix.; Review Best Practical and Debian guidance for package-specific remediation..

Prepared: Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2011-1007 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup

Vulnerability profileCVE Program record

Severity: Unknown
CVSS: Not scored
Known Exploited: No
Published: Feb 28, 2011, 15:00 UTC (UTC+00:00)

Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors

0Timeline events

0ADP providers

5Source links

CVSS and timeline data

No CVSS vectors or timeline events were available in the normalized CVE source material.

Source materials

CVE List V5 sourceCVE List V5
https://github.com/bestpractical/rt/commit/917c211820590950f7eb0521f7f43b31aeed44c4CVE reference · x_refsource_CONFIRM
https://github.com/bestpractical/rt/commit/057552287159e801535e59b8fbd5bd98d1322069CVE reference · x_refsource_CONFIRM
rt-login-information-disclosure(65771)CVE reference · vdb-entry, x_refsource_XF
[mina-dev] 20210225 [jira] [Created] (FTPSERVER-500) Security vulnerability in common/lib/log4j-1.2.17.jarCVE reference · mailing-list, x_refsource_MLIST

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus

n/an/an/aListed

Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.