Lucene search

K
prionPRIOn knowledge basePRION:CVE-2012-1122
HistoryJun 29, 2012 - 7:55 p.m.

Design/Logic Flaw

2012-06-2919:55:00
PRIOn knowledge base
www.prio-n.com
3

6.7 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.7%

bug_actiongroup.php in MantisBT before 1.2.9 does not properly check the report_bug_threshold permission of the receiving project when moving a bug report, which allows remote authenticated users with the report_bug_threshold and move_bug_threshold privileges for a project to bypass intended access restrictions and move bug reports to a different project.

6.7 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.7%