VDB
CVE-2012-1121
CVE-2012-1121
PUBLISHED
CVSS 4.900000095367432 MEDIUM
MantisBT before 1.2.9 does not properly check permissions, which allows remote authenticated users with manager privileges to (1) modify or (2) delete global categories.
EPSS 2.24% · 82.5th percentile
Risk Scores
CVSS 2.0
4.900000095367432
EPSS Score
2.24%
82.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| mantisbt | mantisbt | 1.2.3, 0, 0.19.0 |
| n/a | n/a | * |
Timeline
- Jun 29, 2012 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 6, 2023 EPSS Score
- May 29, 2023 EPSS Score
- Jul 21, 2023 EPSS Score
References
- https://github.com/mantisbt/mantisbt/commit/9443258724e84cb388aa1865b775beaecd80596d url
- [oss-security] 20120306 Re: CVE request: mantisbt before 1.2.9 mailing-list
- FEDORA-2012-18273 vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2012-1121 advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093064.html url
- http://www.mantisbt.org/bugs/view.php?id=13561 url
- http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093063.html technical
- http://security.gentoo.org/glsa/glsa-201211-01.xml technical
- http://secunia.com/advisories/48258 advisory
- http://secunia.com/advisories/51199 technical
- http://www.mantisbt.org/bugs/changelog_page.php?version_id=140 technical
- http://www.securityfocus.com/bid/52313 technical