CVE-2005-4523: Medium severity Mantis Mantis vulnerability
Published Dec 28, 2005
·Updated
Mantis 1.0.0rc3 and earlier discloses private bugs via public RSS feeds, which allows remote attackers to obtain sensitive information.
Affected Software
65 affected components
Mantis Mantis<=1.0.0_rc3
Mantis Mantis=0.9
Mantis Mantis=0.9.1
Mantis Mantis=0.10
Mantis Mantis=0.10.1
Mantis Mantis=0.10.2
Mantis Mantis=0.11
Mantis Mantis=0.11.1
Mantis Mantis=0.12
Mantis Mantis=0.13
Mantis Mantis=0.13.1
Mantis Mantis=0.14
Mantis Mantis=0.14.1
Mantis Mantis=0.14.2
Mantis Mantis=0.14.3
Mantis Mantis=0.14.4
Mantis Mantis=0.14.5
Mantis Mantis=0.14.6
Mantis Mantis=0.14.7
Mantis Mantis=0.14.8
Mantis Mantis=0.15
Mantis Mantis=0.15.1
Mantis Mantis=0.15.2
Mantis Mantis=0.15.3
Mantis Mantis=0.15.4
Mantis Mantis=0.15.5
Mantis Mantis=0.15.6
Mantis Mantis=0.15.7
Mantis Mantis=0.15.8
Mantis Mantis=0.15.9
Mantis Mantis=0.15.10
Mantis Mantis=0.15.11
Mantis Mantis=0.15.12
Mantis Mantis=0.16
Mantis Mantis=0.16.0
Mantis Mantis=0.16.1
Mantis Mantis=0.17
Mantis Mantis=0.17.0
Mantis Mantis=0.17.1
Mantis Mantis=0.17.2
Mantis Mantis=0.17.3
Mantis Mantis=0.17.4
Mantis Mantis=0.17.4a
Mantis Mantis=0.17.5
Mantis Mantis=0.18
Mantis Mantis=0.18.0_rc1
Mantis Mantis=0.18.0a2
Mantis Mantis=0.18.0a3
Mantis Mantis=0.18.0a4
Mantis Mantis=0.18.2
Mantis Mantis=0.18.3
Mantis Mantis=0.18a1
Mantis Mantis=0.19.0
Mantis Mantis=0.19.0_rc1
Mantis Mantis=0.19.0a
Mantis Mantis=0.19.0a1
Mantis Mantis=0.19.0a2
Mantis Mantis=0.19.1
Mantis Mantis=0.19.2
Mantis Mantis=0.19.3
Mantis Mantis=1.0.0_rc1
Mantis Mantis=1.0.0_rc2
Mantis Mantis=1.0.0a1
Mantis Mantis=1.0.0a2
Mantis Mantis=1.0.0a3
Remediation
Patch Available
Event History
Dec 28, 2005
CVE Published
01:03 AM
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-4523?
CVE-2005-4523 is considered a moderate severity vulnerability due to its ability to disclose private bug information.
2
How do I fix CVE-2005-4523?
To mitigate CVE-2005-4523, upgrade to Mantis 1.0.0 or later versions where this vulnerability has been addressed.
3
What software is affected by CVE-2005-4523?
CVE-2005-4523 affects Mantis versions up to and including 1.0.0rc3, as well as several earlier releases.
4
What type of vulnerability is CVE-2005-4523?
CVE-2005-4523 falls under the information disclosure category, allowing unauthorized access to sensitive data.
5
Can CVE-2005-4523 be exploited remotely?
Yes, CVE-2005-4523 can be exploited remotely, enabling attackers to access sensitive information through public RSS feeds.