CVE-2012-2691 : The mc_issue_note_update function in the SOAP API in MantisBT before 1.2.11 does

The mc_issue_note_update function in the SOAP API in MantisBT before 1.2.11 does not properly check privileges, which allows remote attackers with bug reporting privileges to edit arbitrary bugnotes via a SOAP request.

Published 2012-06-17 03:41:42

Updated 2021-01-12 18:06:00

Source Red Hat, Inc.

View at NVD, CVE.org

Products affected by CVE-2012-2691

Mantisbt » Mantisbt
Versions up to, including, (<=) 1.2.10
cpe:2.3:a:mantisbt:mantisbt:*:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.1.0
cpe:2.3:a:mantisbt:mantisbt:1.1.0:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.1.1
cpe:2.3:a:mantisbt:mantisbt:1.1.1:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.1.2
cpe:2.3:a:mantisbt:mantisbt:1.1.2:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.2.2
cpe:2.3:a:mantisbt:mantisbt:1.2.2:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.1.4
cpe:2.3:a:mantisbt:mantisbt:1.1.4:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.1.5
cpe:2.3:a:mantisbt:mantisbt:1.1.5:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.0.8
cpe:2.3:a:mantisbt:mantisbt:1.0.8:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.0.3
cpe:2.3:a:mantisbt:mantisbt:1.0.3:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.0.2
cpe:2.3:a:mantisbt:mantisbt:1.0.2:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.0.1
cpe:2.3:a:mantisbt:mantisbt:1.0.1:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.0.0
cpe:2.3:a:mantisbt:mantisbt:1.0.0:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 0.19.3
cpe:2.3:a:mantisbt:mantisbt:0.19.3:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.0.0 Update RC2
cpe:2.3:a:mantisbt:mantisbt:1.0.0:rc2:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.0.0 Update RC3
cpe:2.3:a:mantisbt:mantisbt:1.0.0:rc3:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.0.0 Update RC4
cpe:2.3:a:mantisbt:mantisbt:1.0.0:rc4:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.0.0 Update RC5
cpe:2.3:a:mantisbt:mantisbt:1.0.0:rc5:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 0.19.0 Update RC1
cpe:2.3:a:mantisbt:mantisbt:0.19.0:rc1:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 0.19.0
cpe:2.3:a:mantisbt:mantisbt:0.19.0:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 0.19.1
cpe:2.3:a:mantisbt:mantisbt:0.19.1:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 0.19.2
cpe:2.3:a:mantisbt:mantisbt:0.19.2:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.2.0
cpe:2.3:a:mantisbt:mantisbt:1.2.0:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.1.7
cpe:2.3:a:mantisbt:mantisbt:1.1.7:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.0.4
cpe:2.3:a:mantisbt:mantisbt:1.0.4:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 0.19.4
cpe:2.3:a:mantisbt:mantisbt:0.19.4:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.0.0 Update RC1
cpe:2.3:a:mantisbt:mantisbt:1.0.0:rc1:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 0.19.5
cpe:2.3:a:mantisbt:mantisbt:0.19.5:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.1.8
cpe:2.3:a:mantisbt:mantisbt:1.1.8:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.1.6
cpe:2.3:a:mantisbt:mantisbt:1.1.6:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.0.7
cpe:2.3:a:mantisbt:mantisbt:1.0.7:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.0.5
cpe:2.3:a:mantisbt:mantisbt:1.0.5:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 0.18.0
cpe:2.3:a:mantisbt:mantisbt:0.18.0:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.2.1
cpe:2.3:a:mantisbt:mantisbt:1.2.1:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.2.4
cpe:2.3:a:mantisbt:mantisbt:1.2.4:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.2.5
cpe:2.3:a:mantisbt:mantisbt:1.2.5:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.2.3
cpe:2.3:a:mantisbt:mantisbt:1.2.3:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.2.6
cpe:2.3:a:mantisbt:mantisbt:1.2.6:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.2.7
cpe:2.3:a:mantisbt:mantisbt:1.2.7:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.2.0 Update Alpha3
cpe:2.3:a:mantisbt:mantisbt:1.2.0:alpha3:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.1.0 Update RC3
cpe:2.3:a:mantisbt:mantisbt:1.1.0:rc3:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.1.0 Update A3
cpe:2.3:a:mantisbt:mantisbt:1.1.0:a3:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.1.0 Update A1
cpe:2.3:a:mantisbt:mantisbt:1.1.0:a1:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.1.9
cpe:2.3:a:mantisbt:mantisbt:1.1.9:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.0.9
cpe:2.3:a:mantisbt:mantisbt:1.0.9:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.2.0 Update RC1
cpe:2.3:a:mantisbt:mantisbt:1.2.0:rc1:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.2.0 Update Alpha1
cpe:2.3:a:mantisbt:mantisbt:1.2.0:alpha1:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.2.0 Update Alpha2
cpe:2.3:a:mantisbt:mantisbt:1.2.0:alpha2:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.2.0 Update RC2
cpe:2.3:a:mantisbt:mantisbt:1.2.0:rc2:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.1.0 Update A4
cpe:2.3:a:mantisbt:mantisbt:1.1.0:a4:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.1.0 Update A2
cpe:2.3:a:mantisbt:mantisbt:1.1.0:a2:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.0.0 Update A1
cpe:2.3:a:mantisbt:mantisbt:1.0.0:a1:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.0.0 Update A2
cpe:2.3:a:mantisbt:mantisbt:1.0.0:a2:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 0.19.0 Update A2
cpe:2.3:a:mantisbt:mantisbt:0.19.0:a2:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.1.3
cpe:2.3:a:mantisbt:mantisbt:1.1.3:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.1.0 Update RC1
cpe:2.3:a:mantisbt:mantisbt:1.1.0:rc1:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.1.0 Update RC2
cpe:2.3:a:mantisbt:mantisbt:1.1.0:rc2:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.0.0 Update A3
cpe:2.3:a:mantisbt:mantisbt:1.0.0:a3:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 0.19.0 Update A1
cpe:2.3:a:mantisbt:mantisbt:0.19.0:a1:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.2.8
cpe:2.3:a:mantisbt:mantisbt:1.2.8:*:*:*:*:*:*:*
Matching versions
Mantisbt » Mantisbt » Version: 1.2.9
cpe:2.3:a:mantisbt:mantisbt:1.2.9:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2012-2691

EPSS FAQ

1.71%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 88 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2012-2691

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

CWE ids for CVE-2012-2691

CWE-264

Assigned by: nvd@nist.gov (Primary)

References for CVE-2012-2691

http://www.openwall.com/lists/oss-security/2012/06/11/6

oss-security - Re: CVE requests (x2) for Mantis Bug Tracker (MantisBT) before 1.2.11

CVEs referencing this url
http://www.securityfocus.com/bid/56467

MantisBT SOAP API CVE-2012-2691 Security Bypass Vulnerability
https://exchange.xforce.ibmcloud.com/vulnerabilities/76180

MantisBT SOAP API security bypass CVE-2012-2691 Vulnerability Report
http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092926.html

[SECURITY] Fedora 18 Update: mantis-1.2.12-1.fc18

CVEs referencing this url
http://security.gentoo.org/glsa/glsa-201211-01.xml

MantisBT: Multiple vulnerabilities (GLSA 201211-01) — Gentoo security

CVEs referencing this url
http://www.mantisbt.org/bugs/view.php?id=14340

0014340: CVE-2012-2691 Reporters can update notes of other users by using SOAP API - MantisBT
http://www.openwall.com/lists/oss-security/2012/06/09/1

oss-security - CVE requests (x2) for Mantis Bug Tracker (MantisBT) before 1.2.11

CVEs referencing this url
https://github.com/mantisbt/mantisbt/commit/175d973105fe9f03a37ced537b742611631067e0

mc_issue_note_update passing wrong param to access check function · mantisbt/mantisbt@175d973 · GitHub
Exploit;Patch
http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093063.html

[SECURITY] Fedora 16 Update: mantis-1.2.12-1.fc16

CVEs referencing this url
http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093064.html

[SECURITY] Fedora 17 Update: mantis-1.2.12-1.fc17

CVEs referencing this url
https://github.com/mantisbt/mantisbt/commit/edc8142bb8ac0ac0df1a3824d78c15f4015d959e

Fix #14340: Reporters can use SOAP to update bugnotes without permission · mantisbt/mantisbt@edc8142 · GitHub
Exploit;Patch
http://www.mantisbt.org/bugs/changelog_page.php?version_id=148

Change Log - MantisBT

CVEs referencing this url
http://www.securityfocus.com/bid/53907

MantisBT SOAP API Security Bypass Vulnerability

Jump to

Vulnerability Details : CVE-2012-2691

Products affected by CVE-2012-2691

Exploit prediction scoring system (EPSS) score for CVE-2012-2691

CVSS scores for CVE-2012-2691

CWE ids for CVE-2012-2691

References for CVE-2012-2691