CVE

Id
77060  
CVE No.
CVE-2014-9759  
Status
Candidate  
Description
Incomplete blacklist vulnerability in the config_is_private function in config_api.php in MantisBT 1.3.x before 1.3.0 allows remote attackers to obtain sensitive master salt configuration information via a SOAP API request.  
Phase
Assigned (20160103)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
706888 77060 CVE-2014-9759 MLIST:[oss-security] 20160102 CVE Request: MantisBT SOAP API can be used to disclose confidential settings  View
706889 77060 CVE-2014-9759 URL:http://www.openwall.com/lists/oss-security/2016/01/02/1  View
706890 77060 CVE-2014-9759 MLIST:[oss-security] 20160103 Re: CVE Request: MantisBT SOAP API can be used to disclose confidential settings  View
706891 77060 CVE-2014-9759 URL:http://www.openwall.com/lists/oss-security/2016/01/03/2  View
706892 77060 CVE-2014-9759 CONFIRM:http://sourceforge.net/p/mantisbt/mailman/message/32948048/  View
706893 77060 CVE-2014-9759 CONFIRM:https://mantisbt.org/bugs/view.php?id=20277  View
706894 77060 CVE-2014-9759 SECTRACK:1035518  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
19293 JVNDB-2014-008171 PHP の ext/zip/php_zip.c および HHVM の ext/zip/ext_zip.cpp の ZipArchive::extractTo 関数におけるディレクトリトラバーサルの脆弱性 PHP の ext/zip/php_zip.c および HHVM の ext/zip/ext_zip.cpp の ZipArchive::extractTo 関数には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2014-9767 77060 4.3 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-008171.html  View