Authentication Bypass Vulnerability in MantisBT SOAP API

CVE-2012-1123 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

The mci_check_login function in api/soap/mc_api.php in the SOAP API in MantisBT before 1.2.9 allows remote attackers to bypass authentication via a null password.

Learn more about our Api Penetration Testing.