MantisBT cloning prompt leakage Security Vulnerability

Release date:
Updated on:

Affected Systems:
Mantisbt 1.x
Description:
--------------------------------------------------------------------------------
Cve id: CVE-2012-5523

MantisBT is a Web-based bug Tracking System.

MantisBT 1.2.12 has a security vulnerability in implementation. errors that occur when the problem is cloned and transferred to another project can be exploited by the original problem user to view new prompts about the clone problem.

<* Source: szwagier44

Link: http://secunia.com/advisories/51300/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Mantisbt
--------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.mantisbt.org/