Lucene search

K
prionPRIOn knowledge basePRION:CVE-2012-1122
HistoryJun 29, 2012 - 7:55 p.m.

Design/Logic Flaw

2012-06-2919:55:00
PRIOn knowledge base
www.prio-n.com
3

6.7 Medium

AI Score

Confidence

Low

3.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:N/I:P/A:P

0.006 Low

EPSS

Percentile

78.6%

bug_actiongroup.php in MantisBT before 1.2.9 does not properly check the report_bug_threshold permission of the receiving project when moving a bug report, which allows remote authenticated users with the report_bug_threshold and move_bug_threshold privileges for a project to bypass intended access restrictions and move bug reports to a different project.

6.7 Medium

AI Score

Confidence

Low

3.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:N/I:P/A:P

0.006 Low

EPSS

Percentile

78.6%