The "View Bugs" page (view_all_bug_page.php) in Mantis 0.17.4a and earlier includes summaries of private bugs for users that do not have access to any projects.Referenceshttp://www.debian.org/security/2002/dsa-161https://exchange.xforce.ibmcloud.com/vulnerabilities/9955http://marc.info/?l=bugtraq&m=103014152320112&w=2http://www.securityfocus.com/bid/5565
