VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 14, 2006· Updated Jun 16, 2026

CVE-2006-6515

CVE-2006-6515

Description

Mantis before 1.1.0a2 sets the default value of $g_bug_reminder_threshold to "reporter" instead of a more privileged role, which has unknown impact and attack vectors, possibly related to frequency of reminders.

Affected products

17
  • Mantisbt/Mantis17 versions
    cpe:2.3:a:mantis:mantis:*:*:*:*:*:*:*:*+ 16 more
    • cpe:2.3:a:mantis:mantis:*:*:*:*:*:*:*:*range: <=1.1.0a1
    • cpe:2.3:a:mantis:mantis:1.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:mantis:mantis:1.0.0a1:*:*:*:*:*:*:*
    • cpe:2.3:a:mantis:mantis:1.0.0a2:*:*:*:*:*:*:*
    • cpe:2.3:a:mantis:mantis:1.0.0a3:*:*:*:*:*:*:*
    • cpe:2.3:a:mantis:mantis:1.0.0_rc1:*:*:*:*:*:*:*
    • cpe:2.3:a:mantis:mantis:1.0.0_rc2:*:*:*:*:*:*:*
    • cpe:2.3:a:mantis:mantis:1.0.0_rc3:*:*:*:*:*:*:*
    • cpe:2.3:a:mantis:mantis:1.0.0_rc4:*:*:*:*:*:*:*
    • cpe:2.3:a:mantis:mantis:1.0.0_rc5:*:*:*:*:*:*:*
    • cpe:2.3:a:mantis:mantis:1.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:mantis:mantis:1.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:mantis:mantis:1.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:mantis:mantis:1.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:mantis:mantis:1.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:mantis:mantis:1.0.6:*:*:*:*:*:*:*
    • (no CPE)range: <1.1.0a2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.