CVE-2002-1111
Fixed in a distro release EPSS 1%
print_all_bug_page.php in Mantis 0.17.3 and earlier does not verify the limit_reporters option, which allows remote attackers to view bug summaries for bugs that would otherwise be restricted.
Products: mantis
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.0 | mantis | 0.17.1-2.2 |