CVE-2012-2692

Published: Jun 17, 2012Modified: Apr 29, 2026

3.6

Vector

AV:N/AC:H/Au:S/C:N/I:P/A:P

Exploitability: 3.9 / Impact: 4.9

Source: NVD

Description

MantisBT before 1.2.11 does not check the delete_attachments_threshold permission when form_security_validation is set to OFF, which allows remote authenticated users with certain privileges to bypass intended access restrictions and delete arbitrary attachments.

Affected (48)

Products: Mantisbt: Mantisbt

Mantisbt

1 product

Mantisbt

Configuration A

48 vulnerable

Vulnerable Software	Affected Versions
Mantisbt Mantisbt	Up to 1.2.10
Mantisbt Mantisbt	Version 0.18.0
Mantisbt Mantisbt	Version 0.19.0
Mantisbt Mantisbt	Version 0.19.0 a1
Mantisbt Mantisbt	Version 0.19.0 a2
Mantisbt Mantisbt	Version 0.19.0 rc1
Mantisbt Mantisbt	Version 0.19.1
Mantisbt Mantisbt	Version 0.19.2
Mantisbt Mantisbt	Version 0.19.3
Mantisbt Mantisbt	Version 0.19.4
Mantisbt Mantisbt	Version 0.19.5
Mantisbt Mantisbt	Version 1.0.0
Mantisbt Mantisbt	Version 1.0.0 a1
Mantisbt Mantisbt	Version 1.0.0 a2
Mantisbt Mantisbt	Version 1.0.0 a3
Mantisbt Mantisbt	Version 1.0.0 rc1
Mantisbt Mantisbt	Version 1.0.0 rc2
Mantisbt Mantisbt	Version 1.0.0 rc3
Mantisbt Mantisbt	Version 1.0.0 rc4
Mantisbt Mantisbt	Version 1.0.0 rc5
Mantisbt Mantisbt	Version 1.0.1
Mantisbt Mantisbt	Version 1.0.2
Mantisbt Mantisbt	Version 1.0.3
Mantisbt Mantisbt	Version 1.0.4
Mantisbt Mantisbt	Version 1.0.5
Mantisbt Mantisbt	Version 1.0.6
Mantisbt Mantisbt	Version 1.0.7
Mantisbt Mantisbt	Version 1.0.8
Mantisbt Mantisbt	Version 1.1.0
Mantisbt Mantisbt	Version 1.1.1
Mantisbt Mantisbt	Version 1.1.2
Mantisbt Mantisbt	Version 1.1.4
Mantisbt Mantisbt	Version 1.1.5
Mantisbt Mantisbt	Version 1.1.6
Mantisbt Mantisbt	Version 1.1.7
Mantisbt Mantisbt	Version 1.1.8
Mantisbt Mantisbt	Version 1.2.0
Mantisbt Mantisbt	Version 1.2.0 alpha1
Mantisbt Mantisbt	Version 1.2.0 alpha2
Mantisbt Mantisbt	Version 1.2.1
Mantisbt Mantisbt	Version 1.2.2
Mantisbt Mantisbt	Version 1.2.3
Mantisbt Mantisbt	Version 1.2.4
Mantisbt Mantisbt	Version 1.2.5
Mantisbt Mantisbt	Version 1.2.6
Mantisbt Mantisbt	Version 1.2.7
Mantisbt Mantisbt	Version 1.2.8
Mantisbt Mantisbt	Version 1.2.9