CVE-2012-1121: Medium severity MantisBT mantisbt vulnerability
Published Jun 29, 2012
·Updated
MantisBT before 1.2.9 does not properly check permissions, which allows remote authenticated users with manager privileges to (1) modify or (2) delete global categories.
Affected Software
59 affected components
MantisBT mantisbt<=1.2.8
MantisBT mantisbt=0.18.0
MantisBT mantisbt=0.19.0
MantisBT mantisbt=0.19.0-a1
MantisBT mantisbt=0.19.0-a2
MantisBT mantisbt=0.19.0-rc1
MantisBT mantisbt=0.19.1
MantisBT mantisbt=0.19.2
MantisBT mantisbt=0.19.3
MantisBT mantisbt=0.19.4
MantisBT mantisbt=0.19.5
MantisBT mantisbt=1.0.0
MantisBT mantisbt=1.0.0-a1
MantisBT mantisbt=1.0.0-a2
MantisBT mantisbt=1.0.0-a3
MantisBT mantisbt=1.0.0-rc1
MantisBT mantisbt=1.0.0-rc2
MantisBT mantisbt=1.0.0-rc3
MantisBT mantisbt=1.0.0-rc4
MantisBT mantisbt=1.0.0-rc5
MantisBT mantisbt=1.0.1
MantisBT mantisbt=1.0.2
MantisBT mantisbt=1.0.3
MantisBT mantisbt=1.0.4
MantisBT mantisbt=1.0.5
MantisBT mantisbt=1.0.6
MantisBT mantisbt=1.0.7
MantisBT mantisbt=1.0.8
MantisBT mantisbt=1.0.9
MantisBT mantisbt=1.1.0
MantisBT mantisbt=1.1.0-a1
MantisBT mantisbt=1.1.0-a2
MantisBT mantisbt=1.1.0-a3
MantisBT mantisbt=1.1.0-a4
MantisBT mantisbt=1.1.0-rc1
MantisBT mantisbt=1.1.0-rc2
MantisBT mantisbt=1.1.0-rc3
MantisBT mantisbt=1.1.1
MantisBT mantisbt=1.1.2
MantisBT mantisbt=1.1.3
MantisBT mantisbt=1.1.4
MantisBT mantisbt=1.1.5
MantisBT mantisbt=1.1.6
MantisBT mantisbt=1.1.7
MantisBT mantisbt=1.1.8
MantisBT mantisbt=1.1.9
MantisBT mantisbt=1.2.0
MantisBT mantisbt=1.2.0-alpha1
MantisBT mantisbt=1.2.0-alpha2
MantisBT mantisbt=1.2.0-alpha3
MantisBT mantisbt=1.2.0-rc1
MantisBT mantisbt=1.2.0-rc2
MantisBT mantisbt=1.2.1
MantisBT mantisbt=1.2.2
MantisBT mantisbt=1.2.3
MantisBT mantisbt=1.2.4
MantisBT mantisbt=1.2.5
MantisBT mantisbt=1.2.6
MantisBT mantisbt=1.2.7
Remediation
Event History
Jun 29, 2012
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-1121?
CVE-2012-1121 has a moderate severity rating due to improper permission checks impacting user access control.
2
How do I fix CVE-2012-1121?
To fix CVE-2012-1121, upgrade to MantisBT version 1.2.9 or later which addresses the vulnerability.
3
Which versions of MantisBT are affected by CVE-2012-1121?
CVE-2012-1121 affects MantisBT versions before 1.2.9, including versions such as 0.18.0, 0.19.x, and 1.0.x.
4
Who is impacted by CVE-2012-1121?
Remote authenticated users with manager privileges in MantisBT are impacted by CVE-2012-1121.
5
What actions can be performed by exploiting CVE-2012-1121?
Exploitation of CVE-2012-1121 allows attackers to modify or delete global categories within MantisBT.