MantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier for remote attackers to copy bug reports without detection.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2012-06-29 19:55
Updated : 2025-04-11 00:51
NVD link : CVE-2012-1119
Mitre link : CVE-2012-1119
CVE.ORG link : CVE-2012-1119
JSON object : View
Products Affected
mantisbt
- mantisbt
CWE
CWE-264
Permissions, Privileges, and Access Controls