CVE-2006-6574 Mantis before 1.1.0a2 does not implement per-item access control for Issue History (Bug History), which allows remote attackers to obtain sensitive information by reading the Change column, as demonst...
MediumCVSS 5.0
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Mantis before 1.1.0a2 does not implement per-item access control for Issue History (Bug History), which allows remote attackers to obtain sensitive information by reading the Change column, as demonstrated by the Change column of a custom field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mantis | <= 1.1.0a1 | No fix listed |
| mantis | = 1.0.0 | No fix listed |
| mantis | = 1.0.0_rc1 | No fix listed |
| mantis | = 1.0.0_rc2 | No fix listed |
| mantis | = 1.0.0_rc3 | No fix listed |
| mantis | = 1.0.0_rc4 | No fix listed |
| mantis | = 1.0.0_rc5 | No fix listed |
| mantis | = 1.0.0a1 | No fix listed |
| mantis | = 1.0.0a2 | No fix listed |
| mantis | = 1.0.0a3 | No fix listed |
| mantis | = 1.0.1 | No fix listed |
| mantis | = 1.0.2 | No fix listed |
| mantis | = 1.0.3 | No fix listed |
| mantis | = 1.0.4 | No fix listed |
| mantis | = 1.0.5 | No fix listed |
| mantis | = 1.0.6 | No fix listed |
References
- bugs.mantisbugtracker.com
- bugs.mantisbugtracker.com
- mantisbt.cvs.sourceforge.net
- mantisbt.cvs.sourceforge.net
- 23258 third-party-advisory vendor-advisory
- 28551 third-party-advisory
- sourceforge.net patch
- DSA-1467 vendor-advisory
- www.mantisbugtracker.com
- 21566 vdb-entry
- ADV-2006-4978 vdb-entry
- mantis-customfield-info-disclosure(30870) vdb-entry