Lucene search
Ubuntu.comUB:CVE-2012-1118HistoryJun 29, 2012 - 12:00 a.m.
CVE-2012-1118
2012-06-2900:00:00
ubuntu.com
ubuntu.com
9
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.009 Low
EPSS
Percentile
82.7%
The access_has_bug_level function in core/access_api.php in MantisBT before
1.2.9 does not properly restrict access when the private_bug_view_threshold
is set to an array, which allows remote attackers to bypass intended
restrictions and perform certain operations on private bug reports.
Bugs
Related
cvelist
cvelist
CVE-2012-1118
2012-06-29 19:00:00
nvd
nvd
CVE-2012-1118
2012-06-29 19:55:02
cve
cve
CVE-2012-1118
2012-06-29 19:55:02
prion
prion
Design/Logic Flaw
2012-06-29 19:55:00
debian
debian
[SECURITY] [DSA 2500-1] mantis security update
2012-06-24 12:12:36
openvas
openvas
Debian: Security Advisory (DSA-2500-1)
2012-08-10 00:00:00
Debian Security Advisory DSA 2500-1 (mantis)
2012-08-10 00:00:00
Fedora Update for mantis FEDORA-2012-18294
2012-11-26 00:00:00
osv
osv
mantis - several
2012-06-24 00:00:00
nessus
nessus
Debian DSA-2500-1 : mantis - several vulnerabilities
2012-06-29 00:00:00
Fedora 18 : mantis-1.2.12-1.fc18 (2012-18273)
2012-11-26 00:00:00
Fedora 17 : mantis-1.2.12-1.fc17 (2012-18294)
2012-11-26 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: mantis-1.2.12-1.fc18
2012-11-23 07:56:23
[SECURITY] Fedora 16 Update: mantis-1.2.12-1.fc16
2012-11-24 03:24:38
[SECURITY] Fedora 17 Update: mantis-1.2.12-1.fc17
2012-11-24 03:25:38
gentoo
gentoo
MantisBT: Multiple vulnerabilities
2012-11-08 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.009 Low
EPSS
Percentile
82.7%
Related for UB:CVE-2012-1118