Beveiligingsadvies

CVE-2012-5523

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2012-11-16 00:00:00

Laatst bijgewerkt 2024-08-06 21:05:47

Toegewezen door redhat

CVSS-score geen score

Status PUBLISHED

Beschrijving

core/email_api.php in MantisBT before 1.2.12 does not properly manage the sending of e-mail notifications about restricted bugs, which might allow remote authenticated users to obtain sensitive information by adding a note to a bug before losing permission to view that bug.

← Alle CVE's bekijken Bekijk op cve.org ↗