CVE-2024-34080

MantisBT (Mantis Bug Tracker) is an open source issue tracker. If an issue references a note that belongs to another issue that the user doesn't have access to, then it gets hyperlinked. Clicking on the link gives an access denied error as expected, yet some information remains available via the link, link label, and tooltip. This can result in disclosure of the existence of the note, the note author name, the note creation timestamp, and the issue id the note belongs to. Version 2.26.2 contains a patch for the issue. No known workarounds are available.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/mantisbt/mantisbt/commit/0a50562369d823689c9b946066d1e49d3c2df226
https://github.com/mantisbt/mantisbt/pull/2000
https://github.com/mantisbt/mantisbt/security/advisories/GHSA-99jc-wqmr-ff2q
https://mantisbt.org/bugs/view.php?id=34434

Configurations

No configuration.

History

No history.

Information

Published : 2024-05-14 15:38

Updated : 2024-05-14 16:12

NVD link : CVE-2024-34080

Mitre link : CVE-2024-34080

CVE.ORG link : CVE-2024-34080

JSON object : View

Products Affected

No product.

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2024-34080", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2024-05-14T15:38:29.703", "references": [{"url": "https://github.com/mantisbt/mantisbt/commit/0a50562369d823689c9b946066d1e49d3c2df226", "source": "security-advisories@github.com"}, {"url": "https://github.com/mantisbt/mantisbt/pull/2000", "source": "security-advisories@github.com"}, {"url": "https://github.com/mantisbt/mantisbt/security/advisories/GHSA-99jc-wqmr-ff2q", "source": "security-advisories@github.com"}, {"url": "https://mantisbt.org/bugs/view.php?id=34434", "source": "security-advisories@github.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "MantisBT (Mantis Bug Tracker) is an open source issue tracker. If an issue references a note that belongs to another issue that the user doesn't have access to, then it gets hyperlinked. Clicking on the link gives an access denied error as expected, yet some information remains available via the link, link label, and tooltip. This can result in disclosure of the existence of the note, the note author name, the note creation timestamp, and the issue id the note belongs to. Version 2.26.2 contains a patch for the issue. No known workarounds are available."}, {"lang": "es", "value": "MantisBT (Mantis Bug Tracker) es un rastreador de problemas de c\u00f3digo abierto. Si un problema hace referencia a una nota que pertenece a otro problema al que el usuario no tiene acceso, se crea un hiperv\u00ednculo. Al hacer clic en el enlace se produce un error de acceso denegado, como se esperaba, pero parte de la informaci\u00f3n permanece disponible a trav\u00e9s del enlace, la etiqueta del enlace y la informaci\u00f3n sobre herramientas. Esto puede dar como resultado la divulgaci\u00f3n de la existencia de la nota, el nombre del autor de la nota, la marca de tiempo de creaci\u00f3n de la nota y la identificaci\u00f3n del problema al que pertenece la nota. La versi\u00f3n 2.26.2 contiene un parche para el problema. No hay workarounds conocidos disponibles."}], "lastModified": "2024-05-14T16:12:23.490", "sourceIdentifier": "security-advisories@github.com"}