Mantis before 1.1.0a2 sets the default value of $g_bug_reminder_threshold to reporter instead of a more privileged role, which has unknown impact and attack vectors, possibly related to frequency of reminders.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mantis | Mantis | * | 1.1.0a1 (including) |
| Mantis | Mantis | 1.0.0 (including) | 1.0.0 (including) |
| Mantis | Mantis | 1.0.0_rc1 (including) | 1.0.0_rc1 (including) |
| Mantis | Mantis | 1.0.0_rc2 (including) | 1.0.0_rc2 (including) |
| Mantis | Mantis | 1.0.0_rc3 (including) | 1.0.0_rc3 (including) |
| Mantis | Mantis | 1.0.0_rc4 (including) | 1.0.0_rc4 (including) |
| Mantis | Mantis | 1.0.0_rc5 (including) | 1.0.0_rc5 (including) |
| Mantis | Mantis | 1.0.0a1 (including) | 1.0.0a1 (including) |
| Mantis | Mantis | 1.0.0a2 (including) | 1.0.0a2 (including) |
| Mantis | Mantis | 1.0.0a3 (including) | 1.0.0a3 (including) |
| Mantis | Mantis | 1.0.1 (including) | 1.0.1 (including) |
| Mantis | Mantis | 1.0.2 (including) | 1.0.2 (including) |
| Mantis | Mantis | 1.0.3 (including) | 1.0.3 (including) |
| Mantis | Mantis | 1.0.4 (including) | 1.0.4 (including) |
| Mantis | Mantis | 1.0.5 (including) | 1.0.5 (including) |
| Mantis | Mantis | 1.0.6 (including) | 1.0.6 (including) |