CVE-2006-6574

Mantis before 1.1.0a2 does not implement per-item access control for Issue History (Bug History), which allows remote attackers to obtain sensitive information…

published December 15, 2006

CVSS
—
EPSS
2%
Percentile
80.1
In the wild
Unconfirmed
What it is

Mantis before 1.1.0a2 does not implement per-item access control for Issue History (Bug History), which allows remote attackers to obtain sensitive information by reading the Change column, as demonstrated by the Change column of a custom field.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01964 · 80.1th percentile
Published
2006-12-15T19:00Z
EPSS history
Timeline
  • 15 DEC 19:00Z
    Mantis before 1.1.0a2 does not implement per-item access control for Issue History (Bug History), which allows remote attackers to obtain sensitive information…
    cvelistv5