PT-2017-6810 · Mantisbt · Mantisbt

Vasyl Kaigorodov · Publicado 2017-08-01 · Atualizado 2017-08-07 · CVE-2015-5059

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions MantisBT versions 1.2.19 and earlier

Description The issue allows remote authenticated users to download attachments linked to arbitrary private projects. This is possible when the threshold to access files is set to ANYBODY. The file id parameter in the "file download.php" endpoint is used to exploit this issue.

Recommendations For MantisBT versions 1.2.19 and earlier, consider restricting access to the file download.php endpoint until a fix is available. As a temporary workaround, change the $g view proj doc threshold setting to a value other than ANYBODY to minimize the risk of exploitation.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2015-5059

Produtos afetados

Mantisbt

Referências · 9

• https://github.com/mantisbt/mantisbt/commit/f39cf5251953b468e9d921e1cf2aca3abdb00772 · Correção
• https://github.com/mantisbt/mantisbt/commit/a4be76d6e5c4939545d84712c79d3f8f4a108c4f · Correção
• http://openwall.com/lists/oss-security/2015/06/25/3 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-5059 · Nota de Segurança
• http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163191.html · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2015/06/25/4 · Nota
• http://securityfocus.com/bid/75414 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=1237199 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5059 · Nota