CVE-2012-1123

Published Jun 29, 2012 CVSS 2.0 · 7.5 High EPSS 3.7% KEV · Not listed
Description
The mci_check_login function in api/soap/mc_api.php in the SOAP API in MantisBT before 1.2.9 allows remote attackers to bypass authentication via a null password.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2500-1 mantis security update
EUVD EUVD EUVD-2012-1157 The mci_check_login function in api/soap/mc_api.php in the SOAP API in MantisBT before 1.2.9 allows remote attackers to bypass authentication via a null password.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 6:45 PM
Reserved
Feb 14, 2012, 12:00 AM
Status
Modified
Published
Jun 29, 2012, 7:55 PM
Modified
Jun 16, 2026, 11:39 PM