CVE-2012-1119

CVE-2012-1119 affects MantisBT up to version 1.2.9, where there is insufficient auditing when users copy or clone a bug report. This allows remote attackers to copy bug reports without detection. Impact per metric: confidentiality impact none, integrity impact partial, availability impact partial...

CVE-2012-1120

CVE-2012-1120 affects MantisBT before 1.2.9. The flaw is in the SOAP API where permissions for bug notes and delete_bug are not properly enforced, enabling remote authenticated users with read/write SOAP API privileges to delete arbitrary bug reports and notes. The vulnerability stems from incorr...

CVE-2012-1122

CVE-2012-1122 affects MantisBT prior to 1.2.9. The bug_actiongroup.php check does not properly enforce report_bug_threshold in the receiving project, allowing remote authenticated users with report_bug_threshold and move_bug_threshold for a project to bypass access controls and move a bug report ...

CVE-2012-1123

The mcichecklogin function in api/soap/mcapi.php in the SOAP API in MantisBT before 1.2.9 allows remote attackers to bypass authentication via a null password...

CVE-2012-1120

The SOAP API in MantisBT before 1.2.9 does not properly enforce the bugnoteallowusereditdelete and deletebugthreshold permissions, which allows remote authenticated users with read and write SOAP API privileges to delete arbitrary bug reports and bug notes...

CVE-2012-1122

bugactiongroup.php in MantisBT before 1.2.9 does not properly check the reportbugthreshold permission of the receiving project when moving a bug report, which allows remote authenticated users with the reportbugthreshold and movebugthreshold privileges for a project to bypass intended access...

CVE-2012-1121

MantisBT before 1.2.9 does not properly check permissions, which allows remote authenticated users with manager privileges to 1 modify or 2 delete global categories...

CVE-2012-1121

CVE-2012-1121 affects MantisBT prior to 1.2.9 where permissions checks fail, allowing remote authenticated users with manager privileges to modify or delete global categories. The available connected advisories indicate Fedora updates for mantis (e.g., mantis-1.2.12/1.2.15) addressing this and re...

CVE-2012-1119

MantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier for remote attackers to copy bug reports without detection...

CVE-2012-1118

The accesshasbuglevel function in core/accessapi.php in MantisBT before 1.2.9 does not properly restrict access when the privatebugviewthreshold is set to an array, which allows remote attackers to bypass intended restrictions and perform certain operations on private bug reports...

CVE-2012-1123

CVE-2012-1123 affects MantisBT prior to 1.2.9: the mci_check_login function in api/soap/mc_api.php in the SOAP API allows remote attackers to bypass authentication with a null password. The issue enables partial confidentiality, integrity, and availability impact. Remediation is to upgrade to Man...

CVE-2012-1118

CVE-2012-1118 affects MantisBT before 1.2.9; the access_has_bug_level check fails when private_bug_view_threshold is an array, allowing bypass of private bug view restrictions and enabling certain operations on private bug reports. The description notes the vulnerability and its impact on access ...

CVE-2012-2692

MantisBT before 1.2.11 does not check the deleteattachmentsthreshold permission when formsecurityvalidation is set to OFF, which allows remote authenticated users with certain privileges to bypass intended access restrictions and delete arbitrary attachments...

CVE-2012-2691

The mcissuenoteupdate function in the SOAP API in MantisBT before 1.2.11 does not properly check privileges, which allows remote attackers with bug reporting privileges to edit arbitrary bugnotes via a SOAP request...

Cross site request forgery (csrf)

The mcissuenoteupdate function in the SOAP API in MantisBT before 1.2.11 does not properly check privileges, which allows remote attackers with bug reporting privileges to edit arbitrary bugnotes via a SOAP request...

CVE-2012-2692

MantisBT before 1.2.11 does not check the deleteattachmentsthreshold permission when formsecurityvalidation is set to OFF, which allows remote authenticated users with certain privileges to bypass intended access restrictions and delete arbitrary attachments...

Design/Logic Flaw

MantisBT before 1.2.11 does not check the deleteattachmentsthreshold permission when formsecurityvalidation is set to OFF, which allows remote authenticated users with certain privileges to bypass intended access restrictions and delete arbitrary attachments...

CVE-2012-2691

The mcissuenoteupdate function in the SOAP API in MantisBT before 1.2.11 does not properly check privileges, which allows remote attackers with bug reporting privileges to edit arbitrary bugnotes via a SOAP request...

CVE-2012-2692

MantisBT versions before 1.2.11 are vulnerable: when form_security_validation is OFF, delete_attachments_threshold permission is not enforced, allowing remote authenticated users with certain privileges to delete arbitrary attachments. Root cause: missing permission check in delete path. Impact: ...

CVE-2012-2691

The mcissuenoteupdate function in the SOAP API in MantisBT before 1.2.11 does not properly check privileges, which allows remote attackers with bug reporting privileges to edit arbitrary bugnotes via a SOAP request...