CVE-2014-8598

The XML Import/Export plugin in MantisBT 1.2.x does not restrict access, which allows remote attackers to (1) upload arbitrary XML files via the import page or (2) obtain sensitive information via the export page. NOTE: this issue can be combined with CVE-2014-7146 to execute arbitrary PHP code.

CVSS v2.0 6.4 MEDIUM

6.4^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability : 10.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://secunia.com/advisories/62101
http://www.debian.org/security/2015/dsa-3120
http://www.mantisbt.org/bugs/view.php?id=17780	Vendor Advisory
http://www.openwall.com/lists/oss-security/2014/11/07/28
http://www.securityfocus.com/bid/70996
https://exchange.xforce.ibmcloud.com/vulnerabilities/98573
https://github.com/mantisbt/mantisbt/commit/80a15487	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:mantisbt:mantisbt:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2014-11-18 15:59

Updated : 2017-09-08 01:29

NVD link : CVE-2014-8598

Mitre link : CVE-2014-8598

CVE.ORG link : CVE-2014-8598

JSON object : View

Products Affected

mantisbt

mantisbt

CWE

CWE-19

Data Processing Errors

{"id": "CVE-2014-8598", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-11-18T15:59:06.750", "references": [{"url": "http://secunia.com/advisories/62101", "source": "cve@mitre.org"}, {"url": "http://www.debian.org/security/2015/dsa-3120", "source": "cve@mitre.org"}, {"url": "http://www.mantisbt.org/bugs/view.php?id=17780", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.openwall.com/lists/oss-security/2014/11/07/28", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/70996", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/98573", "source": "cve@mitre.org"}, {"url": "https://github.com/mantisbt/mantisbt/commit/80a15487", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-19"}]}], "descriptions": [{"lang": "en", "value": "The XML Import/Export plugin in MantisBT 1.2.x does not restrict access, which allows remote attackers to (1) upload arbitrary XML files via the import page or (2) obtain sensitive information via the export page. NOTE: this issue can be combined with CVE-2014-7146 to execute arbitrary PHP code."}, {"lang": "es", "value": "El plugin XML Import/Export en MantisBT 1.2.x no restringe el acceso, lo que permite a atacantes remotos (1) subir c\u00f3digo XML arbitrario mediante la p\u00e1gina 'import' o (2) obtener informaci\u00f3n sensible mediante la p\u00e1gina 'export'. NOTA: este fallo puede ser combinado con la CVE-2014-7146 y ejecutar c\u00f3digo PHP arbitrario."}], "lastModified": "2017-09-08T01:29:25.730", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mantisbt:mantisbt:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5761D76C-7109-4E94-AEC3-3A6419429A91", "versionEndIncluding": "1.2.17"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}