Information Disclosure in Mantis Bug Tracker by MantisBT
CVE-2005-4523

Currently unrated

Key Information:

Vendor

Mantis

Status
Mantis
Vendor
CVE Published:
28 December 2005

What is CVE-2005-4523?

Mantis Bug Tracker versions up to 1.0.0rc3 are susceptible to an information disclosure vulnerability that allows unauthorized users to access private bug reports through public RSS feeds. This flaw can expose sensitive data, enabling potential attackers to gather confidential information without the need for authentication.

References

http://secunia.com/advisories/18481
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18181/
third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2005/3064
vdb-entryx_refsource_VUPEN

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.