CVE Vulnerabilities

CVE-2006-6515

Published: Dec 14, 2006 | Modified: Sep 05, 2008
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Mantis before 1.1.0a2 sets the default value of $g_bug_reminder_threshold to reporter instead of a more privileged role, which has unknown impact and attack vectors, possibly related to frequency of reminders.

Affected Software

Name Vendor Start Version End Version
Mantis Mantis * 1.1.0a1 (including)
Mantis Mantis 1.0.0 (including) 1.0.0 (including)
Mantis Mantis 1.0.0_rc1 (including) 1.0.0_rc1 (including)
Mantis Mantis 1.0.0_rc2 (including) 1.0.0_rc2 (including)
Mantis Mantis 1.0.0_rc3 (including) 1.0.0_rc3 (including)
Mantis Mantis 1.0.0_rc4 (including) 1.0.0_rc4 (including)
Mantis Mantis 1.0.0_rc5 (including) 1.0.0_rc5 (including)
Mantis Mantis 1.0.0a1 (including) 1.0.0a1 (including)
Mantis Mantis 1.0.0a2 (including) 1.0.0a2 (including)
Mantis Mantis 1.0.0a3 (including) 1.0.0a3 (including)
Mantis Mantis 1.0.1 (including) 1.0.1 (including)
Mantis Mantis 1.0.2 (including) 1.0.2 (including)
Mantis Mantis 1.0.3 (including) 1.0.3 (including)
Mantis Mantis 1.0.4 (including) 1.0.4 (including)
Mantis Mantis 1.0.5 (including) 1.0.5 (including)
Mantis Mantis 1.0.6 (including) 1.0.6 (including)

References