Skip to main content

CVE-2014-9506

Description​

MantisBT before 1.2.18 does not properly check permissions when sending an email that indicates when a monitored issue is related to another issue, which allows remote authenticated users to obtain sensitive information about restricted issues.

nvd
CVE ID: CVE-2014-9506
Base Score: 3.5
Base Severity: LOW
Vector String:AV:N/AC:M/Au:S/C:P/I:N/A:N

Refrence: NVD