CVE-2002-1115: Medium severity Mantis Mantis vulnerability

Published Sep 10, 2002

Updated

Mantis 0.17.4a and earlier allows remote attackers to view private bugs by modifying the fid bug ID parameter to (1) bugupdateadvancedpage.php, (2) bugupdatepage.php, (3) viewbugadvancedpage.php, or (4) viewbugpage.php.

Affected Software

6 affected components

Mantis Mantis=0.17.0

Mantis Mantis=0.17.1

Mantis Mantis=0.17.2

Mantis Mantis=0.17.3

Mantis Mantis=0.17.4

Mantis Mantis=0.17.4a

Remediation

Patch Available

http://www.debian.org/security/2002/dsa-161

Event History

Sep 10, 2002

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-1115?

CVE-2002-1115 is considered a medium severity vulnerability due to its potential exposure of private bug information.

How do I fix CVE-2002-1115?

To fix CVE-2002-1115, upgrade to Mantis versions 0.17.5 or later, which contain patches for this vulnerability.

What does CVE-2002-1115 affect?

CVE-2002-1115 affects Mantis versions 0.17.4 and earlier, allowing unauthorized viewing of private bugs.

What are the implications of CVE-2002-1115?

The implication of CVE-2002-1115 is that it allows remote attackers to access potentially sensitive information about private bugs.

Can CVE-2002-1115 be exploited remotely?

Yes, CVE-2002-1115 can be exploited remotely by modifying specific parameters in the URL.