CVE-2008-4689

EUVD-2008-4669
Mantis before 1.1.3 does not unset the session cookie during logout, which makes it easier for remote attackers to hijack sessions.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 77%
Affected Products (NVD)
VendorProductVersion
mantismantis
𝑥
≤ 1.1.2
mantismantis
0.19.3
mantismantis
0.19.4
mantismantis
1.0.1
mantismantis
1.0.2
mantismantis
1.0.3
mantismantis
1.0.4
mantismantis
1.0.5
mantismantis
1.0.6
mantismantis
1.0.7
mantismantis
1.0.8
mantismantis
1.1.1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mantis
dapper
ignored
gutsy
ignored
hardy
ignored
intrepid
ignored
jaunty
not-affected
karmic
not-affected
lucid
not-affected
maverick
not-affected
natty
not-affected
oneiric
not-affected
Common Weakness Enumeration
References
http://secunia.com/advisories/32975
http://www.gentoo.org/security/en/glsa/glsa-200812-07.xml
http://www.mantisbt.org/bugs/changelog_page.php
http://www.mantisbt.org/bugs/file_download.php?file_id=1988&type=bug
http://www.mantisbt.org/bugs/view.php?id=9664
http://www.openwall.com/lists/oss-security/2008/10/20/1
https://exchange.xforce.ibmcloud.com/vulnerabilities/46084
http://secunia.com/advisories/32975
http://www.gentoo.org/security/en/glsa/glsa-200812-07.xml
http://www.mantisbt.org/bugs/changelog_page.php
http://www.mantisbt.org/bugs/file_download.php?file_id=1988&type=bug
http://www.mantisbt.org/bugs/view.php?id=9664
http://www.openwall.com/lists/oss-security/2008/10/20/1
https://exchange.xforce.ibmcloud.com/vulnerabilities/46084