CVE-2012-1118

The access_has_bug_level function in core/access_api.php in MantisBT before 1.2.9 does not properly restrict access when the private_bug_view_threshold is set…

published June 29, 2012

CVSS
—
EPSS
3%
Percentile
87.5
In the wild
Unconfirmed
What it is

The access_has_bug_level function in core/access_api.php in MantisBT before 1.2.9 does not properly restrict access when the private_bug_view_threshold is set to an array, which allows remote attackers to bypass intended restrictions and perform certain operations on private bug reports.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03066 · 87.5th percentile
Published
2012-06-29T19:00Z
EPSS history
Timeline
  • 29 JUN 19:00Z
    The access_has_bug_level function in core/access_api.php in MantisBT before 1.2.9 does not properly restrict access when the private_bug_view_threshold is set…
    cvelistv5