Best Practical Request Tracker (RT) 5 before 5.0.5 allows Information Disclosure via a transaction search in the transaction query builder.
{
"binaries": [
{
"binary_version": "5.0.1+dfsg-1ubuntu1+esm1",
"binary_name": "request-tracker5"
},
{
"binary_version": "5.0.1+dfsg-1ubuntu1+esm1",
"binary_name": "rt5-apache2"
},
{
"binary_version": "5.0.1+dfsg-1ubuntu1+esm1",
"binary_name": "rt5-clients"
},
{
"binary_version": "5.0.1+dfsg-1ubuntu1+esm1",
"binary_name": "rt5-db-mysql"
},
{
"binary_version": "5.0.1+dfsg-1ubuntu1+esm1",
"binary_name": "rt5-db-postgresql"
},
{
"binary_version": "5.0.1+dfsg-1ubuntu1+esm1",
"binary_name": "rt5-db-sqlite"
},
{
"binary_version": "5.0.1+dfsg-1ubuntu1+esm1",
"binary_name": "rt5-doc-html"
},
{
"binary_version": "5.0.1+dfsg-1ubuntu1+esm1",
"binary_name": "rt5-fcgi"
},
{
"binary_version": "5.0.1+dfsg-1ubuntu1+esm1",
"binary_name": "rt5-standalone"
}
],
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}