5

CVE-2004-2666

Mantis before 20041016 provides a complete Issue History (Bug History) in the web interface regardless of view_history_threshold, which allows remote attackers to obtain sensitive information (private bug details) by visiting a bug's web page.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mantis ≫ Mantis Version0.9
Mantis ≫ Mantis Version0.9.1
Mantis ≫ Mantis Version0.10
Mantis ≫ Mantis Version0.10.1
Mantis ≫ Mantis Version0.10.2
Mantis ≫ Mantis Version0.11
Mantis ≫ Mantis Version0.11.1
Mantis ≫ Mantis Version0.12
Mantis ≫ Mantis Version0.13
Mantis ≫ Mantis Version0.13.1
Mantis ≫ Mantis Version0.14
Mantis ≫ Mantis Version0.14.1
Mantis ≫ Mantis Version0.14.2
Mantis ≫ Mantis Version0.14.3
Mantis ≫ Mantis Version0.14.4
Mantis ≫ Mantis Version0.14.5
Mantis ≫ Mantis Version0.14.6
Mantis ≫ Mantis Version0.14.7
Mantis ≫ Mantis Version0.14.8
Mantis ≫ Mantis Version0.15
Mantis ≫ Mantis Version0.15.1
Mantis ≫ Mantis Version0.15.2
Mantis ≫ Mantis Version0.15.3
Mantis ≫ Mantis Version0.15.4
Mantis ≫ Mantis Version0.15.5
Mantis ≫ Mantis Version0.15.6
Mantis ≫ Mantis Version0.15.7
Mantis ≫ Mantis Version0.15.8
Mantis ≫ Mantis Version0.15.9
Mantis ≫ Mantis Version0.15.10
Mantis ≫ Mantis Version0.15.11
Mantis ≫ Mantis Version0.15.12
Mantis ≫ Mantis Version0.16
Mantis ≫ Mantis Version0.16.1
Mantis ≫ Mantis Version0.17
Mantis ≫ Mantis Version0.17.1
Mantis ≫ Mantis Version0.17.2
Mantis ≫ Mantis Version0.17.3
Mantis ≫ Mantis Version0.17.4
Mantis ≫ Mantis Version0.17.4a
Mantis ≫ Mantis Version0.17.5
Mantis ≫ Mantis Version0.18
Mantis ≫ Mantis Version0.18.0_rc1
Mantis ≫ Mantis Version0.18.0a1
Mantis ≫ Mantis Version0.18.0a2
Mantis ≫ Mantis Version0.18.0a3
Mantis ≫ Mantis Version0.18.0a4
Mantis ≫ Mantis Version0.18.1
Mantis ≫ Mantis Version0.18.2
Mantis ≫ Mantis Version0.18.3
Mantis ≫ Mantis Version0.18a1
Mantis ≫ Mantis Version0.19
Mantis ≫ Mantis Version0.19.0_rc1
Mantis ≫ Mantis Version0.19.0a
Mantis ≫ Mantis Version0.19.0a1
Mantis ≫ Mantis Version0.19.0a2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.21% 0.643
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://bugs.mantisbugtracker.com/view.php?id=4724
http://mantisbt.cvs.sourceforge.net/mantisbt/mantisbt/history_inc.php?r1=1.24&r2=1.25
http://mantisbt.cvs.sourceforge.net/mantisbt/mantisbt/history_inc.php?view=log
Patch