Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable configuration file, which allows local users to perform unauthorized database operations.
References
Link | Resource |
---|---|
https://www.debian.org/security/2003/dsa-335 |
Configurations
Information
Published : 2003-08-06 21:00
Updated : 2016-12-07 18:59
NVD link : CVE-2003-0499
Mitre link : CVE-2003-0499
JSON object : View
CWE
Products Affected
mantis
- mantis