CVE-2005-3338: Medium severity Mantis Mantis vulnerability
Published Oct 27, 2005
·Updated
Unspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display the real email addresses of users.
Affected Software
7 affected components
Mantis Mantis=0.19.0
Mantis Mantis=0.19.0_rc1
Mantis Mantis=0.19.0a1
Mantis Mantis=0.19.0a2
Mantis Mantis=0.19.1
Mantis Mantis=0.19.2
Mantis Mantis=0.19.3
Event History
Oct 27, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3338?
CVE-2005-3338 is classified as a medium-severity vulnerability due to the exposure of user email addresses.
2
How do I fix CVE-2005-3338?
To fix CVE-2005-3338, upgrade to Mantis version 0.19.3 or later.
3
What versions of Mantis are affected by CVE-2005-3338?
CVE-2005-3338 affects Mantis versions 0.19.0, 0.19.0_rc1, 0.19.0a1, 0.19.0a2, 0.19.1, and 0.19.2.
4
What type of information is exposed in CVE-2005-3338?
CVE-2005-3338 exposes the real email addresses of users when using reminders in Mantis.
5
Is there a workaround for CVE-2005-3338 if I can't upgrade?
There are no specific workarounds for CVE-2005-3338; upgrading is recommended to mitigate the risk.