CVE-2004-1634

Опубликовано: 25 окт. 2004

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

show_bug.cgi in Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS, when using the insidergroup feature and exporting a bug to XML, shows comments and attachment summaries which are marked as private, which allows remote attackers to gain sensitive information.

Ссылки

http://marc.info/?l=bugtraq&m=109872095201238&w=2
http://www.securityfocus.com/bid/11511
Patch
Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=263780
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17841
http://marc.info/?l=bugtraq&m=109872095201238&w=2
http://www.securityfocus.com/bid/11511
Patch
Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=263780
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17841

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.16.4:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.16.5:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.17:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*

EPSS

Процентиль: 62%

0.00438

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2004-1634

debian

почти 21 год назад

show_bug.cgi in Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS, whe ...

GHSA-qrjq-m326-9xph

github

больше 3 лет назад