CVE-2013-3374

Unspecified vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13, when using the Apache::Session::File session store, allows remote attackers to obtain sensitive information (user preferences and caches) via unknown vectors, related to a "limited session re-use."

• http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.htmlPatch
• http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.htmlPatch
• http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000228.html
• http://secunia.com/advisories/53505Vendor Advisory
• http://secunia.com/advisories/53522Vendor Advisory
• http://www.debian.org/security/2012/dsa-2670
• http://www.osvdb.org/93605
• http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.htmlPatch
• http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.htmlPatch
• http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000228.html
• http://secunia.com/advisories/53505Vendor Advisory
• http://secunia.com/advisories/53522Vendor Advisory
• http://www.debian.org/security/2012/dsa-2670
• http://www.osvdb.org/93605

Published

Aug 23, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-3368bin/rt in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x…
• CVE-2013-3369Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.…
• CVE-2013-3370Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.…
• CVE-2013-3371Cross-site scripting (XSS) vulnerability in Request Tracker …
• CVE-2013-3372Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.…
• CVE-2013-3373CRLF injection vulnerability in Request Tracker (RT) 3.8.x b…
• CVE-2013-3375Cross-site scripting (XSS) vulnerability in the portal page …
• CVE-2013-3376Open redirect vulnerability in the help page in Cisco Video …
• CVE-2013-3377Cisco TelePresence TC Software before 5.1.7 and TE Software …
• CVE-2013-3378Cisco TelePresence TC Software before 6.1 and TE Software be…
• CVE-2013-3379The firewall subsystem in Cisco TelePresence TC Software bef…
• CVE-2013-3380The administrative web interface in the Access Control Serve…