CVE-2002-1116 Information

Description

The \View Bugs\ page (view_all_bug_page.php) in Mantis 0.17.4a and earlier includes summaries of private bugs for users that do not have access to any projects.

Reference

http://marc.info/?l=bugtraq&m=103014152320112&w=2 http://www.debian.org/security/2002/dsa-161 http://www.securityfocus.com/bid/5565 https://exchange.xforce.ibmcloud.com/vulnerabilities/9955