CVE-2012-5523

Published: Nov 16, 2012Modified: Apr 29, 2026

5.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Exploitability: 8.0 / Impact: 4.9

Source: NVD

Description

core/email_api.php in MantisBT before 1.2.12 does not properly manage the sending of e-mail notifications about restricted bugs, which might allow remote authenticated users to obtain sensitive information by adding a note to a bug before losing permission to view that bug.

Affected (62)

Products: Mantisbt: Mantisbt

Mantisbt

1 product

Mantisbt

Configuration A

62 vulnerable

Vulnerable Software	Affected Versions
Mantisbt Mantisbt	Up to 1.2.11
Mantisbt Mantisbt	Version 0.18.0
Mantisbt Mantisbt	Version 0.19.0
Mantisbt Mantisbt	Version 0.19.0 a1
Mantisbt Mantisbt	Version 0.19.0 a2
Mantisbt Mantisbt	Version 0.19.0 rc1
Mantisbt Mantisbt	Version 0.19.1
Mantisbt Mantisbt	Version 0.19.2
Mantisbt Mantisbt	Version 0.19.3
Mantisbt Mantisbt	Version 0.19.4
Mantisbt Mantisbt	Version 0.19.5
Mantisbt Mantisbt	Version 1.0.0
Mantisbt Mantisbt	Version 1.0.0 a1
Mantisbt Mantisbt	Version 1.0.0 a2
Mantisbt Mantisbt	Version 1.0.0 a3
Mantisbt Mantisbt	Version 1.0.0 rc1
Mantisbt Mantisbt	Version 1.0.0 rc2
Mantisbt Mantisbt	Version 1.0.0 rc3
Mantisbt Mantisbt	Version 1.0.0 rc4
Mantisbt Mantisbt	Version 1.0.0 rc5
Mantisbt Mantisbt	Version 1.0.1
Mantisbt Mantisbt	Version 1.0.2
Mantisbt Mantisbt	Version 1.0.3
Mantisbt Mantisbt	Version 1.0.4
Mantisbt Mantisbt	Version 1.0.5
Mantisbt Mantisbt	Version 1.0.6
Mantisbt Mantisbt	Version 1.0.7
Mantisbt Mantisbt	Version 1.0.8
Mantisbt Mantisbt	Version 1.0.9
Mantisbt Mantisbt	Version 1.1.0
Mantisbt Mantisbt	Version 1.1.0 a1
Mantisbt Mantisbt	Version 1.1.0 a2
Mantisbt Mantisbt	Version 1.1.0 a3
Mantisbt Mantisbt	Version 1.1.0 a4
Mantisbt Mantisbt	Version 1.1.0 rc1
Mantisbt Mantisbt	Version 1.1.0 rc2
Mantisbt Mantisbt	Version 1.1.0 rc3
Mantisbt Mantisbt	Version 1.1.1
Mantisbt Mantisbt	Version 1.1.2
Mantisbt Mantisbt	Version 1.1.3
Mantisbt Mantisbt	Version 1.1.4
Mantisbt Mantisbt	Version 1.1.5
Mantisbt Mantisbt	Version 1.1.6
Mantisbt Mantisbt	Version 1.1.7
Mantisbt Mantisbt	Version 1.1.8
Mantisbt Mantisbt	Version 1.1.9
Mantisbt Mantisbt	Version 1.2.0
Mantisbt Mantisbt	Version 1.2.0 alpha1
Mantisbt Mantisbt	Version 1.2.0 alpha2
Mantisbt Mantisbt	Version 1.2.0 alpha3
Mantisbt Mantisbt	Version 1.2.0 rc1
Mantisbt Mantisbt	Version 1.2.0 rc2
Mantisbt Mantisbt	Version 1.2.10
Mantisbt Mantisbt	Version 1.2.1
Mantisbt Mantisbt	Version 1.2.2
Mantisbt Mantisbt	Version 1.2.3
Mantisbt Mantisbt	Version 1.2.4
Mantisbt Mantisbt	Version 1.2.5
Mantisbt Mantisbt	Version 1.2.6
Mantisbt Mantisbt	Version 1.2.7
Mantisbt Mantisbt	Version 1.2.8
Mantisbt Mantisbt	Version 1.2.9