{"api_version":"1","generated_at":"2026-07-23T03:13:11+00:00","cve":"CVE-2012-5522","urls":{"html":"https://cve.report/CVE-2012-5522","api":"https://cve.report/api/cve/CVE-2012-5522.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2012-5522","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2012-5522"},"summary":{"title":"CVE-2012-5522","description":"MantisBT before 1.2.12 does not use an expected default value during decisions about whether a user may modify the status of a bug, which allows remote authenticated users to bypass intended access restrictions and make status changes by leveraging a blank value for a per-status setting.","state":"PUBLISHED","assigner":"redhat","published_at":"2012-11-16 00:55:01","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-264","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5.5","severity":"","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securityfocus.com/bid/56520","name":"http://www.securityfocus.com/bid/56520","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"MantisBT Prior To 1.2.12 Multiple Security Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://openwall.com/lists/oss-security/2012/11/14/1","name":"http://openwall.com/lists/oss-security/2012/11/14/1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE request: mantis before 1.2.12","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093063.html","name":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093063.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[SECURITY] Fedora 16 Update: mantis-1.2.12-1.fc16","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mantisbt.org/bugs/view.php?id=14496","name":"http://www.mantisbt.org/bugs/view.php?id=14496","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"0014496: Workflow Transitions: Minimal Access Level to Change to this status has no correct 'default' - MantisBT","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mantisbt.org/bugs/changelog_page.php?version_id=150","name":"http://www.mantisbt.org/bugs/changelog_page.php?version_id=150","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Change Log - MantisBT","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092926.html","name":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092926.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[SECURITY] Fedora 18 Update: mantis-1.2.12-1.fc18","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093064.html","name":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093064.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[SECURITY] Fedora 17 Update: mantis-1.2.12-1.fc17","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-5522","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-5522","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"0.18.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"0.19.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"0.19.0","cpe7":"a1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"0.19.0","cpe7":"a2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"0.19.0","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"0.19.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"0.19.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"0.19.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"0.19.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"0.19.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.0.0","cpe7":"a1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.0.0","cpe7":"a2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.0.0","cpe7":"a3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.0.0","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.0.0","cpe7":"rc2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.0.0","cpe7":"rc3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.0.0","cpe7":"rc4","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.0.0","cpe7":"rc5","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.0.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.0.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.0.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.0.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.1.0","cpe7":"a1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.1.0","cpe7":"a2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.1.0","cpe7":"a3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.1.0","cpe7":"a4","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.1.0","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.1.0","cpe7":"rc2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.1.0","cpe7":"rc3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.1.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.1.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.1.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.1.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.2.0","cpe7":"alpha1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.2.0","cpe7":"alpha2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.2.0","cpe7":"alpha3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.2.0","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.2.0","cpe7":"rc2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.2.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.2.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.2.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.2.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.2.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.2.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.2.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"1.2.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5522","vulnerable":"1","versionEndIncluding":"1.2.11","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mantisbt","cpe5":"mantisbt","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T21:05:47.313Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"FEDORA-2012-18299","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093063.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.mantisbt.org/bugs/view.php?id=14496"},{"name":"56520","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/56520"},{"name":"[oss-security] 20121114 Re: CVE request: mantis before 1.2.12","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2012/11/14/1"},{"name":"FEDORA-2012-18294","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093064.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.mantisbt.org/bugs/changelog_page.php?version_id=150"},{"name":"FEDORA-2012-18273","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092926.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2012-11-09T00:00:00.000Z","descriptions":[{"lang":"en","value":"MantisBT before 1.2.12 does not use an expected default value during decisions about whether a user may modify the status of a bug, which allows remote authenticated users to bypass intended access restrictions and make status changes by leveraging a blank value for a per-status setting."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2012-11-20T10:00:00.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"name":"FEDORA-2012-18299","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093063.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.mantisbt.org/bugs/view.php?id=14496"},{"name":"56520","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/56520"},{"name":"[oss-security] 20121114 Re: CVE request: mantis before 1.2.12","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2012/11/14/1"},{"name":"FEDORA-2012-18294","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093064.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.mantisbt.org/bugs/changelog_page.php?version_id=150"},{"name":"FEDORA-2012-18273","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092926.html"}]}},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2012-5522","datePublished":"2012-11-16T00:00:00.000Z","dateReserved":"2012-10-24T00:00:00.000Z","dateUpdated":"2024-08-06T21:05:47.313Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2012-11-16 00:55:01","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-264","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.11","matchCriteriaId":"CF1B52BB-9CDA-4676-A922-1EFBA1DF35CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:0.18.0:*:*:*:*:*:*:*","matchCriteriaId":"AF83F757-4B62-441C-8421-15809E573A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:0.19.0:*:*:*:*:*:*:*","matchCriteriaId":"A608AFEC-B265-4143-99DA-BB2AE9D522BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:0.19.0:a1:*:*:*:*:*:*","matchCriteriaId":"A826DA75-7DEE-4E96-9B00-347508BBCFE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:0.19.0:a2:*:*:*:*:*:*","matchCriteriaId":"06663B16-0609-4FCF-9B42-6BF30D25E67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:0.19.0:rc1:*:*:*:*:*:*","matchCriteriaId":"7FCB56AC-4C14-49B1-BEFE-8651BC70476E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:0.19.1:*:*:*:*:*:*:*","matchCriteriaId":"F59BAE6B-C73D-4BE2-AEF9-93F2F4A4373F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:0.19.2:*:*:*:*:*:*:*","matchCriteriaId":"C9DA5C2F-FB7C-4D95-81DE-24D8EADC5C30"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:0.19.3:*:*:*:*:*:*:*","matchCriteriaId":"85A3FBD5-163C-4990-B809-A5C9C81A3C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:0.19.4:*:*:*:*:*:*:*","matchCriteriaId":"D3FDF456-9648-4A7C-B15A-2828A32D4962"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:0.19.5:*:*:*:*:*:*:*","matchCriteriaId":"9EE8BCBE-D864-4311-B73A-DF92162D8DF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6B2602F7-2D93-4E1E-9425-4EDD23752029"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.0.0:a1:*:*:*:*:*:*","matchCriteriaId":"482256A6-B213-4226-AF03-9F93164AA337"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.0.0:a2:*:*:*:*:*:*","matchCriteriaId":"1F005474-CEBD-48FC-9C7F-861AFF771081"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.0.0:a3:*:*:*:*:*:*","matchCriteriaId":"BEF461E5-24D2-4540-A2FC-E0D4C3488B8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"62F6B391-DDE3-4E8E-8582-85EA7287E591"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"80DBD667-1FB9-4354-9150-A190D4D817A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"F27E40C0-263F-452B-8C91-E621A02EFC28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.0.0:rc4:*:*:*:*:*:*","matchCriteriaId":"CB888B14-EA67-4EDB-A3AF-ACD3F0A6227E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.0.0:rc5:*:*:*:*:*:*","matchCriteriaId":"1DB45A02-2522-4E10-BC81-48750ACB42DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"86DE3BE3-D6C9-4905-9E61-B70776460604"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F128A2E2-D509-4B50-95C2-1A31C5B3B31F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"140D5F68-1CAB-458C-BC8B-4F726D657FE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0D25F4F5-7678-41C1-93CB-305883A08527"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"D1A1316D-314B-4740-A836-D5E6319F4B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DBD27CCE-28C4-43CC-8CBD-D7FFB46171AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"97298C43-B881-4C11-ADB6-17A8E43EB84E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"7257ADD7-C9B7-4F85-AA13-615DD033FD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"DE6A94C0-48A1-4D42-AC43-7B4E959C4E21"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"02FE950B-5E29-4FAA-9BE5-79F38B4C38F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.0:a1:*:*:*:*:*:*","matchCriteriaId":"45FF2B45-AA64-4428-8F6E-65C5171990CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.0:a2:*:*:*:*:*:*","matchCriteriaId":"CC868663-1E48-4F9A-B687-5B48D016611B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.0:a3:*:*:*:*:*:*","matchCriteriaId":"4F04ED02-4D99-45CF-9BEC-AC0F648748EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.0:a4:*:*:*:*:*:*","matchCriteriaId":"0AC08731-C4BB-4D84-ADBE-80054149BF33"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"35AAF0B4-31B5-4849-813F-63D9546C2E16"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"FB98EF06-7D6E-4D5F-819D-21B437E91B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"66AB409E-5A5B-4455-8B68-22C32152681B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D6F2BA78-D054-4E49-ABCA-637922898BF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4595B1E3-25AB-489E-A847-FDBF2554DD6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E6A13A38-E149-42A7-9309-BC991521320B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"C11A8F17-5253-475B-89FF-A26EA7531E13"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4A88B09D-CDCF-45FD-B004-13B597DA4F48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"49583BE8-B832-4E9F-B154-47A26C72489D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"E2501F40-3630-4528-BE0A-61D4BB6EC7FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9223DAF7-D03E-4A4E-8AB5-5CEB87DFF2C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"078C0943-C27C-44A9-B00D-5A261C58D6CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CFF77ABF-0A03-437A-B241-1EF2BBB83D24"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"9DA2615A-CD65-4765-AB0A-D72C2BEB00F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"7D09CC46-DFA2-408D-8720-05C23E73C859"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"3461212B-A96B-4D38-A722-84E7418C2A7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"7B6DEE14-744B-4DE4-BDCF-E4E4D37F70A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"D4462BEE-39B6-47BD-B08F-5BE1FD918221"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5F096CD6-534E-4ABF-B2DF-D4B55B8C5F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A66AB537-6FBA-4A51-B10C-BF61F54BC01B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"A50835BF-D28B-47FF-81F0-C34D95D6F2E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"BA0EB9A6-1DFD-4C17-A002-0899DA252A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"BBA33285-3EE7-43FD-8347-E7D9A18DC134"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"8827C2B4-EBEC-4D64-9AC8-07A048467F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1F32DFF4-6448-46FD-9358-4FB1C310EC2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"20328CE4-0488-43B8-AA64-A6CB2230C74C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"0BDEB950-D3F4-4B96-B456-B8441DC403D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"FE69E6A6-8CD2-4C8A-A30A-CB0A04AC539F"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2012","CveId":"5522","Ordinal":"1","Title":"CVE-2012-5522","CVE":"CVE-2012-5522","Year":"2012"},"notes":[{"CveYear":"2012","CveId":"5522","Ordinal":"1","NoteData":"MantisBT before 1.2.12 does not use an expected default value during decisions about whether a user may modify the status of a bug, which allows remote authenticated users to bypass intended access restrictions and make status changes by leveraging a blank value for a per-status setting.","Type":"Description","Title":"CVE-2012-5522"},{"CveYear":"2012","CveId":"5522","Ordinal":"2","NoteData":"2012-11-15","Type":"Other","Title":"Published"},{"CveYear":"2012","CveId":"5522","Ordinal":"3","NoteData":"2012-11-20","Type":"Other","Title":"Modified"}]}}}