Vulnerability in Mantis

CVE-2003-0499

Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable configuration file, which allows local users to perform unauthorized database operations.

EPSS: 0.004 (31.0th percentile) — read the EPSS interpretation.

Affected products

  • Mantis — versions 0.17.5
  • N/a — versions n/a

References