[Secure-testing-commits] r21858 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2013-04-05 21:17:36 +0000 (Fri, 05 Apr 2013)
New Revision: 21858

Modified:
   data/CVE/list
Log:
update for mantis issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-04-05 21:14:29 UTC (rev 21857)
+++ data/CVE/list	2013-04-05 21:17:36 UTC (rev 21858)
@@ -1,19 +1,16 @@
 CVE-2013-XXXX [mantis: Close button available to users despite workflow restrictions]
-	- mantis <unfixed>
-	TODO: check
+	- mantis <not-affected> (affects only Mantis 1.2.12 and later)
 	NOTE: http://www.openwall.com/lists/oss-security/2013/04/04/8
 CVE-2013-XXXX [mantis: XSS vulnerability when deleting a version]
-	- mantis <unfixed>
-	TODO: check
+	- mantis <not-affected> (affects Mantis 1.2.14 only)
 	NOTE: http://www.openwall.com/lists/oss-security/2013/04/04/8
 CVE-2013-XXXX [mantis: XSS vulnerability on Configuration Report page]
-	- mantis <unfixed>
-	TODO: check
+	- mantis <not-affected> (affects Mantis 1.2.13 only)
 	NOTE: http://www.openwall.com/lists/oss-security/2013/04/04/8
 CVE-2013-XXXX [mantis: XSS issue on Configuration Report page when displaying complex value]
 	- mantis <unfixed>
-	TODO: check
 	NOTE: http://www.openwall.com/lists/oss-security/2013/04/04/8
+	NOTE: http://www.mantisbt.org/bugs/view.php?id=15416
 CVE-2013-2763 (** DISPUTED ** The Schneider Electric M340 PLC modules allow remote ...)
 	NOT-FOR-US: Schneider Electric M340 modules
 CVE-2013-2762 (The Schneider Electric Magelis XBT HMI controller has a default ...)