490 matches found
PT-2012-3092
Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.9 Description The issue concerns the SOAP API in MantisBT, where it fails to properly enforce certain permissions, specifically bugnote allow user edit delete and delete bug threshold. This allows remote...
CVE-2012-2691
The mcissuenoteupdate function in the SOAP API in MantisBT before 1.2.11 does not properly check privileges, which allows remote attackers with bug reporting privileges to edit arbitrary bugnotes via a SOAP request...
Cross site request forgery (csrf)
The mcissuenoteupdate function in the SOAP API in MantisBT before 1.2.11 does not properly check privileges, which allows remote attackers with bug reporting privileges to edit arbitrary bugnotes via a SOAP request...
CVE-2012-2691
The mcissuenoteupdate function in the SOAP API in MantisBT before 1.2.11 does not properly check privileges, which allows remote attackers with bug reporting privileges to edit arbitrary bugnotes via a SOAP request...
CVE-2012-2691
The mcissuenoteupdate function in the SOAP API in MantisBT before 1.2.11 does not properly check privileges, which allows remote attackers with bug reporting privileges to edit arbitrary bugnotes via a SOAP request...
CVE-2012-2691
CVE-2012-2691 affects MantisBT (SOAP API) where the mc_issue_note_update function does not properly enforce privileges. As a result, remote attackers with bug reporting privileges could edit arbitrary bugnotes via SOAP requests. The vulnerability is described as code-level privilege check bypass ...
CVE-2012-2691
The mcissuenoteupdate function in the SOAP API in MantisBT before 1.2.11 does not properly check privileges, which allows remote attackers with bug reporting privileges to edit arbitrary bugnotes via a SOAP request...
PT-2012-4184
Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.11 Description The issue concerns a problem with privilege checking in the mc issue note update function within the SOAP API. This allows remote attackers who have bug reporting privileges to edit arbitrary...
CVE-2012-2691: Undefined Security Weakness
The mcissuenoteupdate function in the SOAP API in MantisBT before 1.2.11 does not properly check privileges, which allows remote attackers with bug reporting privileges to edit arbitrary bugnotes via a SOAP request...
