CVE-2005-1565

Опубликовано: 12 мая 2005

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Bugzilla 2.17.1 through 2.18, 2.19.1, and 2.19.2, when a user is prompted to log in while attempting to view a chart, displays the password in the URL, which may allow local users to gain sensitive information from web logs or browser history.

Ссылки

http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=001040
http://marc.info/?l=bugtraq&m=111592031902962&w=2
http://secunia.com/advisories/15338
Exploit
Patch
Vendor Advisory
http://www.osvdb.org/16427
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/13605
http://www.vupen.com/english/advisories/2005/0533
https://bugzilla.mozilla.org/show_bug.cgi?id=287436
Exploit
Patch
Vendor Advisory
http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=001040
http://marc.info/?l=bugtraq&m=111592031902962&w=2
http://secunia.com/advisories/15338
Exploit
Patch
Vendor Advisory
http://www.osvdb.org/16427
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/13605
http://www.vupen.com/english/advisories/2005/0533
https://bugzilla.mozilla.org/show_bug.cgi?id=287436
Exploit
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.16.4:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.16.5:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.17:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.19.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.19.2:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00804

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-1565

ubuntu

больше 20 лет назад

CVE-2005-1565

debian

больше 20 лет назад

Bugzilla 2.17.1 through 2.18, 2.19.1, and 2.19.2, when a user is promp ...

GHSA-3wxw-p7xf-3r35

github

больше 3 лет назад

EPSS

Процентиль: 73%

0.00804

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other