VULNERABILITY INTELLIGENCE

CVE-2012-5522

CVSS score5.5 MEDIUM
EPSS probability1.28%
CISA KEVNot currently listed
Published2012-11-16
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:N

Description

MantisBT before 1.2.12 does not use an expected default value during decisions about whether a user may modify the status of a bug, which allows remote authenticated users to bypass intended access restrictions and make status changes by leveraging a blank value for a per-status setting.

Primary references