PT-2002-2114 · Mantis · Mantis

Publicado 2002-10-04 · Atualizado 2017-10-10 · CVE-2002-1111

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Mantis versions 0.17.3 and earlier

Description: The issue concerns the print all bug page.php file, which fails to verify the limit reporters option. This allows remote attackers to view bug summaries for bugs that would otherwise be restricted.

Recommendations: For Mantis versions 0.17.3 and earlier, consider disabling access to the print all bug page.php file until a fix is available. Restrict access to bug summaries to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2002-1111

DSA-153

Produtos afetados

Mantis

Referências · 6

• http://marc.info/?l=bugtraq&m=102978873620491&w=2 · Nota
• http://debian.org/security/2002/dsa-153 · Aviso do Fabricante
• http://securityfocus.com/bid/5515 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9898 · Nota
• http://mantisbt.sourceforge.net/advisories/2002/2002-02.txt · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1111 · Nota de Segurança