← Back

CVE-2006-6574

nvd nist
Published: Dec 15, 2006Modified: Apr 23, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

Mantis before 1.1.0a2 does not implement per-item access control for Issue History (Bug History), which allows remote attackers to obtain sensitive information by reading the Change column, as demonstrated by the Change column of a custom field.

Affected (16)

Products: Mantis: Mantis
Mantis
1 product
Mantis
Configuration A
16 vulnerable
Vulnerable SoftwareAffected Versions
Mantis
Mantis
Up to 1.1.0a1
Mantis
Version 1.0.0
Mantis
Version 1.0.0_rc1
Mantis
Version 1.0.0_rc2
Mantis
Version 1.0.0_rc3
Mantis
Version 1.0.0_rc4
Mantis
Version 1.0.0_rc5
Mantis
Version 1.0.0a1
Mantis
Version 1.0.0a2
Mantis
Version 1.0.0a3
Mantis
Version 1.0.1
Mantis
Version 1.0.2
Mantis
Version 1.0.3
Mantis
Version 1.0.4
Mantis
Version 1.0.5
Mantis
Version 1.0.6

References (24)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Patch
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.