Unscored DSA-2500-1 6 CVEs

mantis - several

Published Jun 24, 2012 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 6.0	mantis	1.1.8+dfsg-10squeeze2

Vulnerabilities 6

Unscored —

CVE-2012-1118

The access_has_bug_level function in core/access_api.php in MantisBT before 1.2.9 does not properly restrict access whe…

Jun 29, 2012
Unscored —

CVE-2012-1119

MantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier for remote attackers …

Jun 29, 2012
Unscored —

CVE-2012-1120

The SOAP API in MantisBT before 1.2.9 does not properly enforce the bugnote_allow_user_edit_delete and delete_bug_thres…

Jun 29, 2012
Unscored —

CVE-2012-1122

bug_actiongroup.php in MantisBT before 1.2.9 does not properly check the report_bug_threshold permission of the receivi…

Jun 29, 2012
Unscored —

CVE-2012-1123

The mci_check_login function in api/soap/mc_api.php in the SOAP API in MantisBT before 1.2.9 allows remote attackers to…

Jun 29, 2012
Unscored —

CVE-2012-2692

MantisBT before 1.2.11 does not check the delete_attachments_threshold permission when form_security_validation is set …

Jun 17, 2012