Vulnerabilities > Mantisbt > Mantisbt > 1.2.10
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2012-06-17 | CVE-2012-2691 | Permissions, Privileges, and Access Controls vulnerability in Mantisbt The mc_issue_note_update function in the SOAP API in MantisBT before 1.2.11 does not properly check privileges, which allows remote attackers with bug reporting privileges to edit arbitrary bugnotes via a SOAP request. | 7.5 |