CVE-2002-1112: Medium severity Mantis Mantis vulnerability
Published Oct 4, 2002
·Updated
Mantis before 0.17.4 allows remote attackers to list project bugs without authentication by modifying the cookie that is used by the "View Bugs" page.
Affected Software
16 affected components
Mantis Mantis=0.15.3
Mantis Mantis=0.15.4
Mantis Mantis=0.15.5
Mantis Mantis=0.15.6
Mantis Mantis=0.15.7
Mantis Mantis=0.15.8
Mantis Mantis=0.15.9
Mantis Mantis=0.15.10
Mantis Mantis=0.15.11
Mantis Mantis=0.15.12
Mantis Mantis=0.16.0
Mantis Mantis=0.16.1
Mantis Mantis=0.17.0
Mantis Mantis=0.17.1
Mantis Mantis=0.17.2
Mantis Mantis=0.17.3
Remediation
Patch Available
Patch Available
Event History
Oct 4, 2002
CVE Published
04:00 AM
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1112?
CVE-2002-1112 is considered a medium severity vulnerability due to the unauthorized access it permits.
2
How do I fix CVE-2002-1112?
To fix CVE-2002-1112, you should upgrade Mantis to version 0.17.4 or later.
3
What types of systems are affected by CVE-2002-1112?
CVE-2002-1112 affects all Mantis versions prior to 0.17.4.
4
What impact does CVE-2002-1112 have on my system?
CVE-2002-1112 allows remote attackers to list project bugs without authentication, potentially exposing sensitive data.
5
Is there a workaround for CVE-2002-1112 until I can patch?
There is no known effective workaround for CVE-2002-1112, so upgrading to the fixed version is recommended.