Vulnerabilities > CVE-2004-2666 - Unspecified vulnerability in Mantis

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

mantis

NVD

Published: 2004-12-31

Updated: 2008-09-05

Summary

Mantis before 20041016 provides a complete Issue History (Bug History) in the web interface regardless of view_history_threshold, which allows remote attackers to obtain sensitive information (private bug details) by visiting a bug's web page.

Vulnerable Configurations

Part	Description	Count
Application	Mantis Mantis Mantis 0.10.2 Mantis Mantis 0.10 Mantis Mantis 0.14.7 Mantis Mantis 0.19 Mantis Mantis 0.18.2 Mantis Mantis 0.15.12 Mantis Mantis 0.18.0A2 Mantis Mantis 0.18.0A4 Mantis Mantis 0.15.3 Mantis Mantis 0.18 Mantis Mantis 0.15.9 Mantis Mantis 0.14.2 Mantis Mantis 0.9.1 Mantis Mantis 0.13 Mantis Mantis 0.10.1 Mantis Mantis 0.15.10 Mantis Mantis 0.16.1 Mantis Mantis 0.15.2 Mantis Mantis 0.15.4 Mantis Mantis 0.15.11 Mantis Mantis 0.19.0A1 Mantis Mantis 0.11 Mantis Mantis 0.17.4A Mantis Mantis 0.14.5 Mantis Mantis 0.19.0A2 Mantis Mantis 0.18.0A3 Mantis Mantis 0.17.2 Mantis Mantis 0.18.3 Mantis Mantis 0.14.3 Mantis Mantis 0.15.7 Mantis Mantis 0.17.3 Mantis Mantis 0.19.0_Rc1 Mantis Mantis 0.17.1 Mantis Mantis 0.19.0A Mantis Mantis 0.16 Mantis Mantis 0.18.0_Rc1 Mantis Mantis 0.14.6 Mantis Mantis 0.14.4 Mantis Mantis 0.11.1 Mantis Mantis 0.18.0A1 Mantis Mantis 0.15.5 Mantis Mantis 0.12 Mantis Mantis 0.15.1 Mantis Mantis 0.14.8 Mantis Mantis 0.17.5 Mantis Mantis 0.18A1 Mantis Mantis 0.13.1 Mantis Mantis 0.15.8 Mantis Mantis 0.17.4 Mantis Mantis 0.14.1 Mantis Mantis 0.18.1 Mantis Mantis 0.15.6 Mantis Mantis 0.17 Mantis Mantis 0.14 Mantis Mantis 0.15 Mantis Mantis 0.9	56

Summary

Vulnerable Configurations

References