Best Practical Request Tracker (RT) 5 before 5.0.5 allows Information Disclosure via a transaction search in the transaction query builder.
{
"binaries": [
{
"binary_name": "request-tracker5",
"binary_version": "5.0.1+dfsg-1ubuntu1+esm1"
},
{
"binary_name": "rt5-apache2",
"binary_version": "5.0.1+dfsg-1ubuntu1+esm1"
},
{
"binary_name": "rt5-clients",
"binary_version": "5.0.1+dfsg-1ubuntu1+esm1"
},
{
"binary_name": "rt5-db-mysql",
"binary_version": "5.0.1+dfsg-1ubuntu1+esm1"
},
{
"binary_name": "rt5-db-postgresql",
"binary_version": "5.0.1+dfsg-1ubuntu1+esm1"
},
{
"binary_name": "rt5-db-sqlite",
"binary_version": "5.0.1+dfsg-1ubuntu1+esm1"
},
{
"binary_name": "rt5-doc-html",
"binary_version": "5.0.1+dfsg-1ubuntu1+esm1"
},
{
"binary_name": "rt5-fcgi",
"binary_version": "5.0.1+dfsg-1ubuntu1+esm1"
},
{
"binary_name": "rt5-standalone",
"binary_version": "5.0.1+dfsg-1ubuntu1+esm1"
}
],
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}