Security Advisory

CVE-2014-9506

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-01-04 21:00:00
Last updated 2024-08-06 13:47:41
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

MantisBT before 1.2.18 does not properly check permissions when sending an email that indicates when a monitored issue is related to another issue, which allows remote authenticated users to obtain sensitive information about restricted issues.