CVE-2014-9506

MantisBT before 1.2.18 does not properly check permissions when sending an email that indicates when a monitored issue is related to another issue, which…

published January 4, 2015

CVSS
—
EPSS
1%
Percentile
61.0
In the wild
Unconfirmed
What it is

MantisBT before 1.2.18 does not properly check permissions when sending an email that indicates when a monitored issue is related to another issue, which allows remote authenticated users to obtain sensitive information about restricted issues.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00962 · 61.0th percentile
Published
2015-01-04T21:00Z
EPSS history
Timeline
  • 04 JAN 21:00Z
    MantisBT before 1.2.18 does not properly check permissions when sending an email that indicates when a monitored issue is related to another issue, which…
    cvelistv5