Lucene search
Ubuntu.comUB:CVE-2006-6574HistoryDec 15, 2006 - 12:00 a.m.
CVE-2006-6574
2006-12-1500:00:00
ubuntu.com
ubuntu.com
8
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.008 Low
EPSS
Percentile
81.4%
Mantis before 1.1.0a2 does not implement per-item access control for Issue
History (Bug History), which allows remote attackers to obtain sensitive
information by reading the Change column, as demonstrated by the Change
column of a custom field.
Bugs
Related
cve
cve
CVE-2006-6574
2006-12-15 19:28:00
debian
debian
[SECURITY] [DSA 1467-1] New mantis packages fix several vulnerabilities
2008-01-19 12:42:13
osv
osv
mantis - several vulnerabilities
2008-01-19 00:00:00
openvas
openvas
Debian Security Advisory DSA 1467-1 (mantis)
2008-01-31 00:00:00
Debian: Security Advisory (DSA-1467-1)
2008-01-31 00:00:00
nessus
nessus
Debian DSA-1467-1 : mantis - several vulnerabilities
2008-01-21 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.008 Low
EPSS
Percentile
81.4%
Related for UB:CVE-2006-6574