Vulnerability Details CVE-2005-3338
Unspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display the real email addresses of users.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.2%
CVSS Severity
CVSS v2 Score 5.0
References
- http://bugs.mantisbt.org/changelog_page.php
- http://secunia.com/advisories/16506
- http://secunia.com/advisories/17362
- http://secunia.com/advisories/17654
- http://www.debian.org/security/2005/dsa-905
- http://www.gentoo.org/security/en/glsa/glsa-200510-24.xml
- http://www.securityfocus.com/bid/15227
- http://bugs.mantisbt.org/changelog_page.php
- http://secunia.com/advisories/16506
- http://secunia.com/advisories/17362
- http://secunia.com/advisories/17654
- http://www.debian.org/security/2005/dsa-905
- http://www.gentoo.org/security/en/glsa/glsa-200510-24.xml
- http://www.securityfocus.com/bid/15227
Products affected by CVE-2005-3338
-
cpe:2.3:a:mantis:mantis:0.19.0
-
cpe:2.3:a:mantis:mantis:0.19.0_rc1
-
cpe:2.3:a:mantis:mantis:0.19.0a1
-
cpe:2.3:a:mantis:mantis:0.19.0a2
-
cpe:2.3:a:mantis:mantis:0.19.1
-
cpe:2.3:a:mantis:mantis:0.19.2
-
cpe:2.3:a:mantis:mantis:0.19.3