PT-2002-2114 · Mantis · Mantis

Published 2002-10-04 · Updated 2017-10-10 · CVE-2002-1111

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Mantis versions 0.17.3 and earlier

Description: The issue concerns the print all bug page.php file, which fails to verify the limit reporters option. This allows remote attackers to view bug summaries for bugs that would otherwise be restricted.

Recommendations: For Mantis versions 0.17.3 and earlier, consider disabling access to the print all bug page.php file until a fix is available. Restrict access to bug summaries to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2002-1111

DSA-153

Affected Products

Mantis

References · 6

• http://debian.org/security/2002/dsa-153 · Vendor Advisory
• http://securityfocus.com/bid/5515 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1111 · Security Note
• http://marc.info/?l=bugtraq&m=102978873620491&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9898 · Note
• http://mantisbt.sourceforge.net/advisories/2002/2002-02.txt · Note