CVE-2008-4689

Mantis before 1.1.3 does not unset the session cookie during logout, which makes it easier for remote attackers to hijack sessions.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 77%
VendorProductVersion
mantismantis
𝑥
≤ 1.1.2
mantismantis
0.19.3
mantismantis
0.19.4
mantismantis
1.0.1
mantismantis
1.0.2
mantismantis
1.0.3
mantismantis
1.0.4
mantismantis
1.0.5
mantismantis
1.0.6
mantismantis
1.0.7
mantismantis
1.0.8
mantismantis
1.1.1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mantis
oneiric
not-affected
natty
not-affected
maverick
not-affected
lucid
not-affected
karmic
not-affected
jaunty
not-affected
intrepid
ignored
hardy
ignored
gutsy
ignored
dapper
ignored
Common Weakness Enumeration
References
http://secunia.com/advisories/32975
http://www.gentoo.org/security/en/glsa/glsa-200812-07.xml
http://www.mantisbt.org/bugs/changelog_page.php
http://www.mantisbt.org/bugs/file_download.php?file_id=1988&type=bug
http://www.mantisbt.org/bugs/view.php?id=9664
http://www.openwall.com/lists/oss-security/2008/10/20/1
https://exchange.xforce.ibmcloud.com/vulnerabilities/46084
http://secunia.com/advisories/32975
http://www.gentoo.org/security/en/glsa/glsa-200812-07.xml
http://www.mantisbt.org/bugs/changelog_page.php
http://www.mantisbt.org/bugs/file_download.php?file_id=1988&type=bug
http://www.mantisbt.org/bugs/view.php?id=9664
http://www.openwall.com/lists/oss-security/2008/10/20/1
https://exchange.xforce.ibmcloud.com/vulnerabilities/46084