Vulnerability CVE-2014-9089

Vulnerability Name:

CVE-2014-9089 (CCN-98987)

Assigned:

2014-11-26

Published:

2014-11-26

Updated:

2017-01-03

Summary:

Multiple SQL injection vulnerabilities in view_all_bug_page.php in MantisBT before 1.2.18 allow remote attackers to execute arbitrary SQL commands via the (1) sort or (2) dir parameter to view_all_set.php.

CVSS v3 Severity:

7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
6.5 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:H/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
6.5 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:H/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

CWE-89

Vulnerability Consequences:

Data Manipulation

References:

Source: MITRE
Type: CNA
CVE-2014-9089

Source: CCN
Type: oss-security Mailing List, Wed, 26 Nov 2014 00:13:34 +0100
CVE Request: MantisBT SQL injection in view_all_set.php

Source: CCN
Type: oss-security Mailing List, Wed, 26 Nov 2014 02:44:16 -0500 (EST)
Re: CVE Request: MantisBT SQL injection in view_all_set.php

Source: SECUNIA
Type: UNKNOWN
62101

Source: DEBIAN
Type: UNKNOWN
DSA-3120

Source: MLIST
Type: UNKNOWN
[oss-security] 20141126 CVE Request: MantisBT SQL injection in view_all_set.php

Source: MLIST
Type: UNKNOWN
[oss-security] 20141126 Re: CVE Request: MantisBT SQL injection in view_all_set.php

Source: BID
Type: Exploit
71298

Source: CCN
Type: BID-71298
MantisBT 'view_all_set.php' Multiple SQL Injection Vulnerabilities

Source: XF
Type: UNKNOWN
mantisbt-cve20149089-sql-injection(98987)

Source: CONFIRM
Type: Patch
https://github.com/mantisbt/mantisbt/commit/b0021673ab23249244119bde3c7fcecd4daa4e7f

Source: CCN
Type: MantisBT Web site
Mantis Bug Tracker

Source: CONFIRM
Type: Vendor Advisory
https://www.mantisbt.org/bugs/view.php?id=17841

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2014-9089

Vulnerable Configuration:

Configuration 1:

cpe:/o:debian:debian_linux:1.2:*:*:*:*:*:*:*

Configuration 2:

cpe:/a:mantisbt:mantisbt:*:*:*:*:*:*:*:* (Version <= 1.2.17)

Configuration CCN 1:

cpe:/a:mantisbt:mantisbt:1.2.12:*:*:*:*:*:*:*

OR cpe:/a:mantisbt:mantisbt:1.2.14:*:*:*:*:*:*:*

OR cpe:/a:mantisbt:mantisbt:1.2.13:*:*:*:*:*:*:*

OR cpe:/a:mantisbt:mantisbt:1.2.15:*:*:*:*:*:*:*

OR cpe:/a:mantisbt:mantisbt:1.2.16:*:*:*:*:*:*:*

OR cpe:/a:mantisbt:mantisbt:1.2.17:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.cisecurity:def:28	P	DSA-3120-1 -- mantis -- security update	2016-02-08
oval:com.ubuntu.precise:def:20149089000	V	CVE-2014-9089 on Ubuntu 12.04 LTS (precise) - medium.	2014-11-28

BACK