PT-2020-17486 · Mantisbt · Mantisbt

D3Vpoo1 · Published 2020-12-30 · Updated 2022-05-24 · CVE-2020-35849

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 2.24.4

Description An issue in MantisBT allows an unprivileged attacker to view the Summary field of private issues and bugnotes revisions, potentially gaining access to confidential information. This is achieved via the bugnote id parameter in the bug revision view page.php file.

Recommendations For versions prior to 2.24.4, update to version 2.24.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the bug revision view page.php file to minimize the risk of exploitation. Avoid using the bugnote id parameter in the affected page until the issue is resolved.

Exploit

Fix

Incorrect Authorization

IDOR

Weakness Enumeration

CWE-863

CWE-639

Related Identifiers

CVE-2020-35849

GHSA-7J8M-FM49-XGMG

Affected Products

Mantisbt

References · 7

• 🔥 https://mantisbt.org/bugs/view.php?id=27370 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-35849 · Security Note
• https://osv.dev/vulnerability/GHSA-7j8m-fm49-xgmg · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-35849 · Vendor Advisory
• https://github.com/mantisbt/mantisbt · Note
• https://github.com/mantisbt/mantisbt/commit/e9fd168c519a46c2cd0f3cb835e9ce5dba77fc4d · Note
• https://t.me/cvenotify/7979 · Telegram Post