What’s Vulnerable › Vulnerabilities
CVE-2003-0499
- Severity: low (CVSS 3.6 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2003-08-07 · updated 2026-06-16
Description
Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable configuration file, which allows local users to perform unauthorized database operations.
Affected products
- mantis: 0.17.5
References
Get alerted when CVE-2003-0499 or the next vulnerability affects your stack