0009824: unauthorized access to issue details

ID	Project	Category	View Status	Date Submitted	Last Update
0009824	mantisbt	authentication	public	2008-11-17 09:28	2009-06-26 12:02

Reporter	makc	Assigned To	giallu
Priority	normal	Severity	minor	Reproducibility	always
Status	closed	Resolution	duplicate
Product Version	1.1.0rc2

Summary	0009824: unauthorized access to issue details
Description	Even if you have no access to some issue, it is possible to read some/all of issue details by commenting on other issue with a link to it. In your comment, link title will give away issue details. I think I used 0002345 syntax to get the link, but who knows.
Tags	No tags attached.

giallu 2008-11-17 10:29 reporter ~0019914	I think this is a duplicate of 0009321. Additionally, please be sure to always check if you can reproduce the problem on latest version before reporting new bugs.