Information Disclosure in Mantis Before Version 1.1.0a2
CVE-2006-6574

Currently unrated

Key Information:

Vendor: Mantis
Status: Mantis
Vendor: CVE Published:; 15 December 2006

What is CVE-2006-6574?

Mantis Bug Tracker prior to version 1.1.0a2 lacks appropriate per-item access control for the Issue History feature. This oversight allows remote attackers to leverage the Change column in issue history to gain unauthorized access to sensitive information. Such vulnerabilities can lead to exposure of confidential details, impacting user privacy and security.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/30870

vdb-entryx_refsource_XF

http://mantisbt.cvs.sourceforge.net/mantisbt/mantisbt/cor...

x_refsource_MISC

http://sourceforge.net/project/shownotes.php?release_id=4...

x_refsource_CONFIRM

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Dec 15, 2006
Vulnerability Reserved
Dec 15, 2006

CVE-2006-6574 Data

JSON