CVE-2014-9759

2016-04-11T21:59:00
ID CVE-2014-9759
Type cve
Reporter cve@mitre.org
Modified 2016-12-03T03:02:00

Description

Incomplete blacklist vulnerability in the config_is_private function in config_api.php in MantisBT 1.3.x before 1.3.0 allows remote attackers to obtain sensitive master salt configuration information via a SOAP API request.