CVE-2012-5523

2012-11-15T19:55:01
ID CVE-2012-5523
Type cve
Reporter NVD
Modified 2017-08-28T21:32:42

Description

core/email_api.php in MantisBT before 1.2.12 does not properly manage the sending of e-mail notifications about restricted bugs, which might allow remote authenticated users to obtain sensitive information by adding a note to a bug before losing permission to view that bug.