CVE-2014-9506
MantisBT before 1.2.18 does not properly check permissions when sending an email that indicates when a monitored issue is related to another issue, which allows remote authentic…
Published: 2015-01-04 · CVSS: Unscored
MantisBT before 1.2.18 does not properly check permissions when sending an email that indicates when a monitored issue is related to another issue, which allows remote authenticated users to obtain sensitive information about restricted issues.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7