PT-2005-4148 · Mantis · Mantis

Published 2005-10-27 · Updated 2008-09-05 · CVE-2005-3338

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mantis versions prior to 0.19.3

Description The issue causes Mantis to display the real email addresses of users when using reminders, potentially exposing sensitive information.

Recommendations For versions prior to 0.19.3, update to version 0.19.3 or later to resolve the issue.

Fix

Related Identifiers

CVE-2005-3338

DSA-905-1

Affected Products

Mantis

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2005-3338 · Security Note
• http://gentoo.org/security/en/glsa/glsa-200510-24.xml · Vendor Advisory
• http://debian.org/security/2005/dsa-905 · Vendor Advisory
• http://secunia.com/advisories/17362 · Note
• http://bugs.mantisbt.org/changelog_page.php · Note
• http://secunia.com/advisories/16506 · Note
• http://securityfocus.com/bid/15227 · Note
• http://secunia.com/advisories/17654 · Note