CVE-2020-35849: MantisBT Incorrect Authorization in bug_revision_view_page.php
Summary
CVE-2020-35849: MantisBT Incorrect Authorization for bug_revision_view_page.php check. Affects mantisbt/mantisbt versions < 2.24.4. Fixed in 2.24.4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MantisBT is an open-source issue tracker designed for managing software development projects. It provides features such as bug tracking, project management, and collaboration tools. However, prior to version 2.24.4, MantisBT had a vulnerability that allowed unauthorized access to private issue details, compromising user confidentiality.
Vulnerability Detail
An issue was discovered in MantisBT before version 2.24.4 where an incorrect access check in the bug_revision_view_page.php file allowed unprivileged attackers to view the Summary field of private issues and bugnotes revisions. This vulnerability arises from the mishandling of access permissions, which can lead to unauthorized disclosure of sensitive information through the bugnote_id parameter.
How To Fix
Minimum fixed version
2.24.4
This is the first release that contains the fix.
composer require mantisbt/mantisbt:2.24.4Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, restrict access to the bug_revision_view_page.php file by implementing additional server-side access controls until the package can be updated.
Conclusion
In summary, CVE-2020-35849 is a significant vulnerability in MantisBT that allows unauthorized access to private issue details. It is crucial for users to update to version 2.24.4 or later to protect against potential data breaches. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for mantisbt/mantisbt →
FAQ
CVE-2020-35849 is a vulnerability in MantisBT that allows unauthorized users to access private issue details due to incorrect authorization checks.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The risks include unauthorized access to confidential information, which can lead to data breaches and loss of user trust.
Yes, a patch is available in MantisBT version 2.24.4 and later. It is recommended to update to this version to mitigate the risk.
The CVSS score of this vulnerability is 7.5, indicating a high severity level.
Related vulnerabilities
Recent vulnerabilities recorded for mantisbt/mantisbt.
