Lucene search

[email protected]CVE-2006-6515

HistoryDec 14, 2006 - 1:28 a.m.

CVE-2006-6515

2006-12-1401:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve

mantis

privilege escalation

security vulnerability

nvd

7.4 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

56.9%

JSON

Mantis before 1.1.0a2 sets the default value of $g_bug_reminder_threshold to “reporter” instead of a more privileged role, which has unknown impact and attack vectors, possibly related to frequency of reminders.

CPENameOperatorVersion
mantis:mantismantiseq1.0.6
mantis:mantismantiseq1.0.2
mantis:mantismantiseq1.0.4
mantis:mantismantiseq1.0.0_rc3
mantis:mantismantiseq1.0.0_rc1
mantis:mantismantiseq1.0.0_rc2
mantis:mantismantiseq1.0.0
mantis:mantismantiseq1.0.1
mantis:mantismantiseq1.0.0_rc4
mantis:mantismantiseq1.0.3

CPE	Name	Operator	Version
mantis:mantis	mantis	eq	1.0.6
mantis:mantis	mantis	eq	1.0.2
mantis:mantis	mantis	eq	1.0.4
mantis:mantis	mantis	eq	1.0.0_rc3
mantis:mantis	mantis	eq	1.0.0_rc1
mantis:mantis	mantis	eq	1.0.0_rc2
mantis:mantis	mantis	eq	1.0.0
mantis:mantis	mantis	eq	1.0.1
mantis:mantis	mantis	eq	1.0.0_rc4
mantis:mantis	mantis	eq	1.0.3

Rows per page:

1-10 of 161

References

sourceforge.net/project/shownotes.php?release_id=469627

www.mantisbugtracker.com/changelog.php

7.4 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

56.9%

JSON

Related for CVE-2006-6515

cvelist1