Vulnerabilities > CVE-2004-2666 - Information Disclosure vulnerability in Mantis

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

NONE

Availability impact

NONE

network

low complexity

mantis

NVD

Published: 2004-12-31

Updated: 2008-09-05

Summary

Mantis before 20041016 provides a complete Issue History (Bug History) in the web interface regardless of view_history_threshold, which allows remote attackers to obtain sensitive information (private bug details) by visiting a bug's web page.

Vulnerable Configurations

Part	Description	Count
Application	Mantis Mantis Mantis 0.9 Mantis Mantis 0.9.1 Mantis Mantis 0.10 Mantis Mantis 0.10.1 Mantis Mantis 0.10.2 Mantis Mantis 0.11 Mantis Mantis 0.11.1 Mantis Mantis 0.12 Mantis Mantis 0.13 Mantis Mantis 0.13.1 Mantis Mantis 0.14 Mantis Mantis 0.14.1 Mantis Mantis 0.14.2 Mantis Mantis 0.14.3 Mantis Mantis 0.14.4 Mantis Mantis 0.14.5 Mantis Mantis 0.14.6 Mantis Mantis 0.14.7 Mantis Mantis 0.14.8 Mantis Mantis 0.15 Mantis Mantis 0.15.1 Mantis Mantis 0.15.2 Mantis Mantis 0.15.3 Mantis Mantis 0.15.4 Mantis Mantis 0.15.5 Mantis Mantis 0.15.6 Mantis Mantis 0.15.7 Mantis Mantis 0.15.8 Mantis Mantis 0.15.9 Mantis Mantis 0.15.10 Mantis Mantis 0.15.11 Mantis Mantis 0.15.12 Mantis Mantis 0.16 Mantis Mantis 0.16.1 Mantis Mantis 0.17 Mantis Mantis 0.17.1 Mantis Mantis 0.17.2 Mantis Mantis 0.17.3 Mantis Mantis 0.17.4 Mantis Mantis 0.17.4A Mantis Mantis 0.17.5 Mantis Mantis 0.18 Mantis Mantis 0.18.0_Rc1 Mantis Mantis 0.18.0A1 Mantis Mantis 0.18.0A2 Mantis Mantis 0.18.0A3 Mantis Mantis 0.18.0A4 Mantis Mantis 0.18.1 Mantis Mantis 0.18.2 Mantis Mantis 0.18.3 Mantis Mantis 0.18A1 Mantis Mantis 0.19 Mantis Mantis 0.19.0_Rc1 Mantis Mantis 0.19.0A Mantis Mantis 0.19.0A1 Mantis Mantis 0.19.0A2	56

Summary

Vulnerable Configurations

References