VDB
CVE-2014-9506
CVE-2014-9506
PUBLISHED
CVSS 3.5 LOW
MantisBT before 1.2.18 does not properly check permissions when sending an email that indicates when a monitored issue is related to another issue, which allows remote authenticated users to obtain sensitive information about restricted issues.
EPSS 0.96% · 61.3th percentile
Risk Scores
CVSS 2.0
3.5
EPSS Score
0.96%
61.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| mantisbt | mantisbt | 0 |
| n/a | n/a | * |
Timeline
- Jan 4, 2015 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 22, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 7, 2022 EPSS Score
- Oct 30, 2022 EPSS Score
- Dec 23, 2022 EPSS Score
- Feb 14, 2023 EPSS Score
- Apr 9, 2023 EPSS Score
- Jun 1, 2023 EPSS Score
- Jul 25, 2023 EPSS Score
References
- 62101 third-party-advisory
- https://www.mantisbt.org/bugs/changelog_page.php?version_id=191 url
- DSA-3120 vendor-advisory
- [oss-security] 20141207 MantisBT 1.2.18 Released mailing-list
- https://www.mantisbt.org/bugs/view.php?id=9885 url
- https://nvd.nist.gov/vuln/detail/CVE-2014-9506 advisory