CVE-2011-4459: Bestpractical Rt

Low severity, CVSS 3.5. EPSS: 1% chance of exploitation in the next 30 days.

Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not properly disable groups, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging a group membership.

Affected products

• Bestpractical Rt: version 3.0.0 only; version 3.0.1 only; version 3.0.2 only; version 3.0.3 only; version 3.0.4 only; version 3.0.5 only; …

Published 2012-06-04. Last modified 2026-06-16.