CVE-2003-0499
Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable...
CVE-2003-0499 is a low vulnerability (CVSS 3.6) in Mantis, published June 28, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. Fixed in mantis 0.17.1-3.
Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable configuration file, which allows local users to perform unauthorized database operations.
Exploit likelihood
What each source reports
NVD Score used
Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable configuration file, which allows local users to perform unauthorized database operations.
- Record
CVE-2003-0499- CVSS 2.0
- 3.6 Low
AV:L/AC:L/Au:N/C:P/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable configuration file, which allows local users to perform unauthorized database operations.
- Record
CVE-2003-0499- Updated
- 2026-11-02
EUVDEUVD-2003-0493 No score
Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable configuration file, which allows local users to perform unauthorized database operations.
- Record
EUVD-2003-0493- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hpvv-rrg9-q2p9 No score
Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable...
Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable configuration file, which allows local users to perform unauthorized database operations.
- Record
GHSA-hpvv-rrg9-q2p9- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mantisDebian:3.0 |
before 0.17.1-3 | 0.17.1-3 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |