CVE-2002-1112

Published: Oct 4, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Mantis before 0.17.4 allows remote attackers to list project bugs without authentication by modifying the cookie that is used by the "View Bugs" page.

Affected (16)

Products: Mantis: Mantis

Mantis

1 product

Mantis

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Mantis Mantis	Version 0.15.10
Mantis Mantis	Version 0.15.11
Mantis Mantis	Version 0.15.12
Mantis Mantis	Version 0.15.3
Mantis Mantis	Version 0.15.4
Mantis Mantis	Version 0.15.5
Mantis Mantis	Version 0.15.6
Mantis Mantis	Version 0.15.7
Mantis Mantis	Version 0.15.8
Mantis Mantis	Version 0.15.9
Mantis Mantis	Version 0.16.0
Mantis Mantis	Version 0.16.1
Mantis Mantis	Version 0.17.0
Mantis Mantis	Version 0.17.1
Mantis Mantis	Version 0.17.2
Mantis Mantis	Version 0.17.3