Lucene search

RedhatCVE-2013-1930

HistoryOct 31, 2019 - 8:15 p.m.

CVE-2013-1930

2019-10-3120:15:10

CWE-20

redhat

web.nvd.nist.gov

cve-2013-1930

mantisbt

authenticated users

workflow restriction

close issues

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

AI Score

4.9

Confidence

High

EPSS

0.002

Percentile

56.2%

JSON

MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues.

Affected configurations

Nvd

Vulners

Node

mantisbtmantisbtRange1.2.12–1.2.15

Node

fedoraprojectfedoraMatch17

fedoraprojectfedoraMatch18

VendorProductVersionCPE
mantisbtmantisbt*cpe:2.3:a:mantisbt:mantisbt:*:*:*:*:*:*:*:*
fedoraprojectfedora17cpe:2.3:o:fedoraproject:fedora:17:*:*:*:*:*:*:*
fedoraprojectfedora18cpe:2.3:o:fedoraproject:fedora:18:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mantisbt	mantisbt	*	cpe:2.3:a:mantisbt:mantisbt::::::::
fedoraproject	fedora	17	cpe:2.3:o:fedoraproject:fedora:17:::::::*
fedoraproject	fedora	18	cpe:2.3:o:fedoraproject:fedora:18:::::::*

CNA Affected

[
  {
    "product": "mantisBT",
    "vendor": "mantisBT",
    "versions": [
      {
        "status": "affected",
        "version": "1.2.12 before 1.2.15"
      }
    ]
  }
]

References

lists.fedoraproject.org/pipermail/package-announce/2013-April/103438.html

lists.fedoraproject.org/pipermail/package-announce/2013-April/103459.html

www.openwall.com/lists/oss-security/2013/04/06/4

www.securityfocus.com/bid/58890

bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1930

exchange.xforce.ibmcloud.com/vulnerabilities/83796

mantisbt.org/bugs/view.php?id=15453

security-tracker.debian.org/tracker/CVE-2013-1930

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

AI Score

4.9

Confidence

High

EPSS

0.002

Percentile

56.2%

JSON

Related for CVE-2013-1930