Mantis before 1.1.0a2 sets the default value of $g_bug_reminder_threshold to "reporter" instead of a more privileged role, which has unknown impact and attack vectors, possibly related to frequency of reminders.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2006-12-13 17:28
Updated : 2008-09-05 14:14
NVD link : CVE-2006-6515
Mitre link : CVE-2006-6515
JSON object : View
CWE
Products Affected
mantis
- mantis