1. Home
  2. CVE Database
  3. CVE-2012-5523
MEDIUM · 5.5

CVE-2012-5523

core/email_api.php in MantisBT before 1.2.12 does not properly manage the sending of e-mail notifications about restricted bugs, which might allow remote authenticated users to obtain sensitive inform...

Vulnerability Description

core/email_api.php in MantisBT before 1.2.12 does not properly manage the sending of e-mail notifications about restricted bugs, which might allow remote authenticated users to obtain sensitive information by adding a note to a bug before losing permission to view that bug.

CVSS Score

5.5

MEDIUM

AV:N/AC:L/Au:S/C:P/I:P/A:N
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
NONE

Affected Products

VendorProductVersions
MantisbtMantisbt<= 1.2.11

Related Weaknesses (CWE)

CWE-264

References

FAQ

What is CVE-2012-5523?

CVE-2012-5523 is a vulnerability with a CVSS score of 5.5 (MEDIUM). core/email_api.php in MantisBT before 1.2.12 does not properly manage the sending of e-mail notifications about restricted bugs, which might allow remote authenticated users to obtain sensitive inform...

How severe is CVE-2012-5523?

CVE-2012-5523 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2012-5523?

Check the references section above for vendor advisories and patch information. Affected products include: Mantisbt Mantisbt.