CVE-2002-1116: High severity Mantis Mantis vulnerability
Published Oct 4, 2002
·Updated
The "View Bugs" page (viewallbugpage.php) in Mantis 0.17.4a and earlier includes summaries of private bugs for users that do not have access to any projects.
Affected Software
6 affected components
Mantis Mantis=0.17.0
Mantis Mantis=0.17.1
Mantis Mantis=0.17.2
Mantis Mantis=0.17.3
Mantis Mantis=0.17.4
Mantis Mantis=0.17.4a
Remediation
Patch Available
Event History
Oct 4, 2002
CVE Published
04:00 AM
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1116?
CVE-2002-1116 is considered to have moderate severity due to its potential exposure of sensitive bug information.
2
How do I fix CVE-2002-1116?
To fix CVE-2002-1116, upgrade Mantis to version 0.17.5 or later where this vulnerability has been addressed.
3
What software versions are affected by CVE-2002-1116?
CVE-2002-1116 affects Mantis versions 0.17.0 through 0.17.4a.
4
What type of vulnerability is CVE-2002-1116?
CVE-2002-1116 is a privacy vulnerability that exposes summaries of private bugs to unauthorized users.
5
Where can I find more technical details about CVE-2002-1116?
Detailed technical information regarding CVE-2002-1116 can typically be found in security advisories related to Mantis.