Vulnerability Details CVE-2005-4524
Mantis 1.0.0rc3 does not properly handle "Make note private" when a bug is being resolved, which has unknown impact and attack vectors, probably related to an information leak.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.0%
CVSS Severity
CVSS v2 Score 5.0
References
- http://secunia.com/advisories/18481
- http://sourceforge.net/project/shownotes.php?release_id=377934&group_id=14963
- http://www.debian.org/security/2005/dsa-944
- http://www.trapkit.de/advisories/TKADV2005-11-002.txt
- http://www.vupen.com/english/advisories/2005/3064
- http://secunia.com/advisories/18481
- http://sourceforge.net/project/shownotes.php?release_id=377934&group_id=14963
- http://www.debian.org/security/2005/dsa-944
- http://www.trapkit.de/advisories/TKADV2005-11-002.txt
- http://www.vupen.com/english/advisories/2005/3064
Products affected by CVE-2005-4524
-
cpe:2.3:a:mantis:mantis:1.0.0_rc1
-
cpe:2.3:a:mantis:mantis:1.0.0_rc2
-
cpe:2.3:a:mantis:mantis:1.0.0_rc3
-
cpe:2.3:a:mantis:mantis:1.0.0a1
-
cpe:2.3:a:mantis:mantis:1.0.0a2
-
cpe:2.3:a:mantis:mantis:1.0.0a3