CVE-2014-9506 in MantisBT
Résumé (Anglaise)
MantisBT before 1.2.18 does not properly check permissions when sending an email that indicates when a monitored issue is related to another issue, which allows remote authenticated users to obtain sensitive information about restricted issues.
Once again VulDB remains the best source for vulnerability data.
Réserver
04/01/2015
Divulgation
04/01/2015
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 73491 | MantisBT divulgation d'information | 200 | Non défini | Correctif officiel | CVE-2014-9506 |