MantisBT Prior To 1.2.12 Multiple Security Vulnerabilities

Bugtraq ID:	56520
Class:	Unknown
CVE:	CVE-2012-5522 CVE-2012-5523
Remote:	Yes
Local:	No
Published:	Nov 14 2012 12:00AM
Updated:	Apr 13 2015 09:19PM
Credit:	szwagier44 and TomR
Vulnerable:	Mantisbt Mantisbt 1.2.9 Mantisbt Mantisbt 1.2.8 Mantisbt Mantisbt 1.2.7 Mantisbt Mantisbt 1.2.6 Mantisbt Mantisbt 1.2.4 Mantisbt Mantisbt 1.2.3 Mantisbt Mantisbt 1.2.2 Mantisbt Mantisbt 1.2.1
Not Vulnerable:

MantisBT Prior To 1.2.12 Multiple Security Vulnerabilities

MantisBT is prone to multiple security vulnerabilities.

Attackers can exploit these issues to obtain sensitive information or bypass certain security restrictions that may lead to further attacks.

MantisBT versions prior to 1.2.12 are vulnerable.

MantisBT Prior To 1.2.12 Multiple Security Vulnerabilities

Attackers can exploit these issues with a browser.

MantisBT Prior To 1.2.12 Multiple Security Vulnerabilities

Solution:
Vendor updates are available. Please see the references for more information.

MantisBT Prior To 1.2.12 Multiple Security Vulnerabilities

References:

• [oss-security] CVE request: mantis before 1.2.12 (oss-security)
  
• [oss-security] Re: CVE request: mantis before 1.2.12 (Mitre)
  
• mantisbt - Change Log 1.2.12 (MantisBT)
  
• MantisBT Homepage (MantisBT)