An issue was discovered in MantisBT before 2.24.4. A missing access check in bug_actiongroup.php allows an attacker (with rights to create new issues) to use the COPY group action to create a clone, including all bugnotes and attachments, of any private issue (i.e., one having Private view status, or belonging to a private Project) via the bug_arr[] parameter. This provides full access to potentially confidential information.
References
Link | Resource |
---|---|
https://mantisbt.org/bugs/view.php?id=27357 | Exploit Patch Vendor Advisory |
https://mantisbt.org/bugs/view.php?id=27728 | Exploit Patch Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2021-01-29T06:45:19
Updated: 2021-01-29T06:45:19
Reserved: 2020-12-07T00:00:00
Link: CVE-2020-29604
JSON object: View
NVD Information
Status : Analyzed
Published: 2021-01-29T07:15:17.873
Modified: 2021-01-30T00:42:08.310
Link: CVE-2020-29604
JSON object: View
Redhat Information
No data.
CWE