oss-sec mailing list archives

Re: CVE Request: information disclosure in MantisBT attachments

From: Damien Regad <dregad () mantisbt org>
Date: Wed, 19 Nov 2014 14:57:48 +0000 (UTC)

Damien Regad <dregad@...> writes:

Please assign a CVE ID for the following issue.

Description:

MantisBT issue attachments can be downloaded without permission.


Do you require any additional information to assign a CVE ?

TIA
Damien

CVE Request: information disclosure in MantisBT attachments Damien Regad (Nov 15)
- Re: CVE Request: information disclosure in MantisBT attachments Damien Regad (Nov 19)
- Re: CVE Request: information disclosure in MantisBT attachments cve-assign (Nov 19)