Mantisbt CVE-2014-9624

HIGH

Improper Authentication (CWE-287)

2017-09-12 cve@mitre.org

Authentication Bypass Mantisbt

7.5

CVSS 3.0 · NVD

Share

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

1

CVE Published

Sep 12, 2017 - 14:29 cve.org

HIGH 7.5

DescriptionCVE.org

CAPTCHA bypass vulnerability in MantisBT before 1.2.19.

AnalysisAI

CAPTCHA bypass vulnerability in MantisBT before 1.2.19. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Improper Authentication (CWE-287), which allows attackers to bypass authentication mechanisms to gain unauthorized access. Affected products include: Mantisbt. Version information: before 1.2.19..

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement multi-factor authentication, enforce strong password policies, use proven authentication frameworks.

More in Mantisbt

View all

CVE-2017-7615 HIGH Act Now POC

MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value

CVE-2014-7146 HIGH Act Now POC

The XmlImportExport plugin in MantisBT 1.2.17 and earlier allows remote attackers to execute arbitrary PHP code via a cr

CVE-2014-8598 MEDIUM This Month POC

The XML Import/Export plugin in MantisBT 1.2.x does not restrict access, which allows remote attackers to (1) upload arb

CVE-2014-2238 MEDIUM This Month POC

SQL injection vulnerability in the manage configuration page (adm_config_report.php) in MantisBT 1.2.13 through 1.2.16 a

CVE-2019-15074 CRITICAL Act Now POC

The Timeline feature in my_view_page.php in MantisBT through 2.21.1 has a stored cross-site scripting (XSS) vulnerabilit

CVE-2024-23830 HIGH This Week POC

MantisBT is an open source issue tracker. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, no

CVE-2012-2691 HIGH This Week POC

The mc_issue_note_update function in the SOAP API in MantisBT before 1.2.11 does not properly check privileges, which al

CVE-2014-9280 HIGH This Week POC

The current_user_get_bug_filter function in core/current_user_api.php in MantisBT before 1.2.18 allows remote attackers

CVE-2014-8554 HIGH This Week POC

SQL injection vulnerability in the mc_project_get_attachments function in api/soap/mc_project_api.php in MantisBT before

CVE-2014-9089 HIGH This Week POC

Multiple SQL injection vulnerabilities in view_all_bug_page.php in MantisBT before 1.2.18 allow remote attackers to exec

CVE-2014-1608 HIGH This Week POC

SQL injection vulnerability in the mci_file_get function in api/soap/mc_file_api.php in MantisBT before 1.2.16 allows re

CVE-2014-1609 HIGH This Week POC

Multiple SQL injection vulnerabilities in MantisBT before 1.2.16 allow remote attackers to execute arbitrary SQL command

Same weakness CWE-287 – Improper Authentication

View all

CVE-2020-0688 HIGH POC

CVE-2023-46805 HIGH POC

CVE-2015-1187 CRITICAL POC

CVE-2024-7593 CRITICAL POC

CVE-2017-7921 CRITICAL POC

CVE-2024-53704 CRITICAL POC

CVE-2015-7755 CRITICAL POC

CVE-2013-0625 CRITICAL POC

Same technique Authentication Bypass

View all

CVE-2023-22515 CRITICAL POC

CVE-2012-4681 CRITICAL POC

CVE-2013-2465 CRITICAL POC

CVE-2011-3544 CRITICAL POC

CVE-2012-1723 CRITICAL POC

CVE-2017-10271 HIGH POC

CVE-2015-1427 CRITICAL POC

CVE-2025-3248 CRITICAL POC

Share

CVE-2014-9624 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy