high7.5
CVE-2002-1116
The "View Bugs" page (view_all_bug_page.php) in Mantis 0.17.4a and earlier includes summaries of private bugs for users that do not have access to any projects.
Impact
The "View Bugs" page (view_all_bug_page.php) in Mantis 0.17.4a and earlier includes summaries of private bugs for users that do not have access to any projects.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mantis | Mantis | Versions 0.17.0, 0.17.1, 0.17.2, 0.17.3, 0.17.4, 0.17.4a |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=103014152320112&w=2
- http://www.debian.org/security/2002/dsa-161
- http://www.securityfocus.com/bid/5565
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9955
- http://marc.info/?l=bugtraq&m=103014152320112&w=2
- http://www.debian.org/security/2002/dsa-161
- http://www.securityfocus.com/bid/5565
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9955