CVE-2002-1111 describes an information disclosure vulnerability in Mantis 0.17.3 and earlier, specifically within the print_all_bug_page.php script. This flaw allows unauthenticated remote attackers to bypass access restrictions and view summaries of bugs that should otherwise be hidden, due to a failure to properly verify the "limit_reporters" option. With a CVSS score of 5.0, this vulnerability is of medium severity. It requires no authentication (Au:N) and has low attack complexity (AC:L), meaning it can be easily exploited over the network (AV:N) to achieve partial confidentiality impact (C:P) by revealing sensitive bug information. There is no impact on integrity or availability. There is no evidence of active exploitation, nor are there any known public exploit codes or Metasploit modules available. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
0.16.0CPE matchmatch criteria | cpe:2.3:a:mantis:mantis:0.16.0:*:*:*:*:*:*:* | ||
0.16.1CPE matchmatch criteria | cpe:2.3:a:mantis:mantis:0.16.1:*:*:*:*:*:*:* | ||
0.17.0CPE matchmatch criteria | cpe:2.3:a:mantis:mantis:0.17.0:*:*:*:*:*:*:* | ||
0.17.1CPE matchmatch criteria | cpe:2.3:a:mantis:mantis:0.17.1:*:*:*:*:*:*:* | ||
0.17.2CPE matchmatch criteria | cpe:2.3:a:mantis:mantis:0.17.2:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.