CVE-2014-8598

The XML Import/Export plugin in MantisBT 1.2.x does not restrict access, which allows remote attackers to (1) upload arbitrary XML files via the import page or (2) obtain sensitive information via the export page. NOTE: this issue can be combined with CVE-2014-7146 to execute arbitrary PHP code.

CVSS v2.0 6.4 MEDIUM

6.4^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability : 10.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://github.com/mantisbt/mantisbt/commit/80a15487	Vendor Advisory
http://www.mantisbt.org/bugs/view.php?id=17780	Vendor Advisory
http://www.securityfocus.com/bid/70996
http://www.openwall.com/lists/oss-security/2014/11/07/28
http://www.debian.org/security/2015/dsa-3120
http://secunia.com/advisories/62101
https://exchange.xforce.ibmcloud.com/vulnerabilities/98573

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:mantisbt:mantisbt:*:*:*:*:*:*:*:*

Information

Published : 2014-11-18 07:59

Updated : 2017-09-07 18:29

NVD link : CVE-2014-8598

Mitre link : CVE-2014-8598

JSON object : View

CWE

CWE-19

Data Processing Errors

Advertisement

Products Affected

mantisbt

mantisbt

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://github.com/mantisbt/mantisbt/commit/80a15487", "name": "https://github.com/mantisbt/mantisbt/commit/80a15487", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.mantisbt.org/bugs/view.php?id=17780", "name": "http://www.mantisbt.org/bugs/view.php?id=17780", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.securityfocus.com/bid/70996", "name": "70996", "tags": [], "refsource": "BID"}, {"url": "http://www.openwall.com/lists/oss-security/2014/11/07/28", "name": "[oss-security] 20141108 CVE-2014-8598: MantisBT XML Import/Export plugin unrestricted access", "tags": [], "refsource": "MLIST"}, {"url": "http://www.debian.org/security/2015/dsa-3120", "name": "DSA-3120", "tags": [], "refsource": "DEBIAN"}, {"url": "http://secunia.com/advisories/62101", "name": "62101", "tags": [], "refsource": "SECUNIA"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/98573", "name": "mantisbt-cve20148598-sec-bypass(98573)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The XML Import/Export plugin in MantisBT 1.2.x does not restrict access, which allows remote attackers to (1) upload arbitrary XML files via the import page or (2) obtain sensitive information via the export page. NOTE: this issue can be combined with CVE-2014-7146 to execute arbitrary PHP code."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-19"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2014-8598", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 4.9, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2014-11-18T15:59Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:mantisbt:mantisbt:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "1.2.17"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-09-08T01:29Z"}