CVE-2013-1811

An access control issue in MantisBT before 1.2.13 allows users with "Reporter" permissions to change any issue to "New".

Score

CVSS 3.1 4.3 Medium

Status

Modified - secalert@redhat.com

Published

2019-11-07

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Debian Linux (Debian)
• Mantis (Mantis)
• Mantisbt (Mantisbt)

References

• http://www.debian.org/security/2015/dsa-3120
• http://www.openwall.com/lists/oss-security/2013/03/03/6
• http://www.openwall.com/lists/oss-security/2013/03/04/9
• https://mantisbt.org/bugs/view.php?id=15258
• https://security-tracker.debian.org/tracker/CVE-2013-1811