CVE-2013-3370 on Ubuntu 16.04 LTS (xenial) - medium.
Description:
Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 does not properly restrict access to private callback components, which allows remote attackers to have an unspecified impact via a direct request.