CVE-2014-8598
medium
CVSS v3
—
CVSS v2
6.4
VIR risk
6.4
Description
The XML Import/Export plugin in MantisBT 1.2.x does not restrict access, which allows remote attackers to (1) upload arbitrary XML files via the import page or (2) obtain sensitive information via the export page. NOTE: this issue can be combined with CVE-2014-7146 to execute arbitrary PHP code.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: cve@mitre.org — https://github.com/mantisbt/mantisbt/commit/80a15487
Vendor advisory: cve@mitre.org — http://www.mantisbt.org/bugs/view.php?id=17780
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| mantisbt | mantisbt | {"endIncluding":"1.2.17"} | |
References
- http://secunia.com/advisories/62101
- http://www.debian.org/security/2015/dsa-3120
- http://www.mantisbt.org/bugs/view.php?id=17780
- http://www.openwall.com/lists/oss-security/2014/11/07/28
- http://www.securityfocus.com/bid/70996
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98573
- https://github.com/mantisbt/mantisbt/commit/80a15487
- http://secunia.com/advisories/62101
- http://www.debian.org/security/2015/dsa-3120
- http://www.mantisbt.org/bugs/view.php?id=17780
- http://www.openwall.com/lists/oss-security/2014/11/07/28
- http://www.securityfocus.com/bid/70996
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98573
- https://github.com/mantisbt/mantisbt/commit/80a15487
CWEs
CWE-19
Verify integrity in audit chain (admin only). AS-IS.