CVE-2003-0499: Mantis

Low severity, CVSS 3.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable configuration file, which allows local users to perform unauthorized database operations.

Affected products

• Mantis Mantis: version 0.17.5 only

Published 2003-08-07. Last modified 2026-06-16.