NVD

Id
43140  
Name
CVE-2012-1122  
Description
bug_actiongroup.php in MantisBT before 1.2.9 does not properly check the report_bug_threshold permission of the receiving project when moving a bug report, which allows remote authenticated users with the report_bug_threshold and move_bug_threshold privileges for a project to bypass intended access restrictions and move bug reports to a different project.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-06-29  
Modified Date
2013-08-26  
Seq
2012-1122  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
217013 43140 CVE-2012-1122 FEDORA-2012-18273  View
217014 43140 CVE-2012-1122 FEDORA-2012-18299  View
217015 43140 CVE-2012-1122 FEDORA-2012-18294  View
217016 43140 CVE-2012-1122 GLSA-201211-01  View
217017 43140 CVE-2012-1122 DSA-2500  View
217018 43140 CVE-2012-1122 http://www.mantisbt.org/bugs/changelog_page.php?version_id=140  View
217019 43140 CVE-2012-1122 http://www.mantisbt.org/bugs/view.php?id=13748  View
217020 43140 CVE-2012-1122 [oss-security] 20120306 Re: CVE request: mantisbt before 1.2.9  View
217021 43140 CVE-2012-1122 52313  View
217022 43140 CVE-2012-1122 https://github.com/mantisbt/mantisbt/commit/0da3f7ace233208eb3c8d628cc2fd6e56d83839f  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27257 JVNDB-2012-002964 MantisBT の bug_actiongroup.php におけるアクセス制限を回避される脆弱性 MantisBT の bug_actiongroup.php は、バグレポートを移動する際、移動先のプロジェクトの report_bug_threshold パーミッションを適切にチェックしないため、アクセス制限を回避され、バグレポートを異なるプロジェクトに移動される脆弱性が存在します。 CVE-2012-1122 54360 CVE-2012-1122 43140 3.6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002964.html 2012-03-03 2012-07-03 View