critical10.0
CVE-2006-6515
Mantis before 1.1.0a2 sets the default value of $g_bug_reminder_threshold to "reporter" instead of a more privileged role, which has unknown impact and attack …
Impact
Mantis before 1.1.0a2 sets the default value of $g_bug_reminder_threshold to "reporter" instead of a more privileged role, which has unknown impact and attack vectors, possibly related to frequency of reminders.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mantis | Mantis | through 1.1.0a1 Versions 1.0.0, 1.0.0_rc1, 1.0.0_rc2, 1.0.0_rc3, 1.0.0_rc4 |