MantisBT before 1.2.9 does not properly check permissions, which allows remote authenticated users with manager privileges to (1) modify or (2) delete global categories.
Version | Base score | Base severity | Vector |
---|
Hyperlink | Resource Type |
---|
MantisBT before 1.2.9 does not properly check permissions, which allows remote authenticated users with manager privileges to (1) modify or (2) delete global categories.
Type | CWE ID | Description |
---|---|---|
text | N/A | n/a |
Version | Base score | Base severity | Vector |
---|
CAPEC ID | Description |
---|
Event | Date |
---|
Hyperlink | Resource |
---|---|
http://www.securityfocus.com/bid/52313 | vdb-entry x_refsource_BID |
https://github.com/mantisbt/mantisbt/commit/9443258724e84cb388aa1865b775beaecd80596d | x_refsource_CONFIRM |
http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093063.html | vendor-advisory x_refsource_FEDORA |
http://security.gentoo.org/glsa/glsa-201211-01.xml | vendor-advisory x_refsource_GENTOO |
http://www.mantisbt.org/bugs/changelog_page.php?version_id=140 | x_refsource_CONFIRM |
http://www.mantisbt.org/bugs/view.php?id=13561 | x_refsource_CONFIRM |
http://secunia.com/advisories/51199 | third-party-advisory x_refsource_SECUNIA |
http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093064.html | vendor-advisory x_refsource_FEDORA |
http://www.openwall.com/lists/oss-security/2012/03/06/9 | mailing-list x_refsource_MLIST |
http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092926.html | vendor-advisory x_refsource_FEDORA |
http://secunia.com/advisories/48258 | third-party-advisory x_refsource_SECUNIA |
Version | Base score | Base severity | Vector |
---|
CAPEC ID | Description |
---|
Event | Date |
---|
MantisBT before 1.2.9 does not properly check permissions, which allows remote authenticated users with manager privileges to (1) modify or (2) delete global categories.
Date Added | Due Date | Vulnerability Name | Required Action |
---|---|---|---|
N/A |
Type | Version | Base score | Base severity | Vector |
---|---|---|---|---|
Primary | 2.0 | 4.9 | MEDIUM | AV:N/AC:M/Au:S/C:N/I:P/A:P |