medium4.3
CVE-2013-1811
An access control issue in MantisBT before 1.2.13 allows users with "Reporter" permissions to change any issue to "New".
Impact
An access control issue in MantisBT before 1.2.13 allows users with "Reporter" permissions to change any issue to "New".
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mantisbt | Mantisbt | before 1.2.13 |
| Debian | Debian Linux | Versions 6.0, 7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.debian.org/security/2015/dsa-3120
- http://www.openwall.com/lists/oss-security/2013/03/03/6
- http://www.openwall.com/lists/oss-security/2013/03/04/9
- https://mantisbt.org/bugs/view.php?id=15258
- https://security-tracker.debian.org/tracker/CVE-2013-1811
- http://www.debian.org/security/2015/dsa-3120
- http://www.openwall.com/lists/oss-security/2013/03/03/6
- http://www.openwall.com/lists/oss-security/2013/03/04/9
- https://mantisbt.org/bugs/view.php?id=15258
- https://security-tracker.debian.org/tracker/CVE-2013-1811