CVE-2004-0702

Published Jul 21, 2004 CVSS 2.0 · 5.0 Medium EPSS 1.2% KEV · Not listed
Description
DBI in Bugzilla 2.17.1 through 2.17.7 displays the database password in an error message when the SQL server is not running, which could allow remote attackers to gain sensitive information.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2004-0701 DBI in Bugzilla 2.17.1 through 2.17.7 displays the database password in an error message when the SQL server is not running, which could allow remote attackers to gain sensitive information.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 8, 2024, 12:24 AM
Reserved
Jul 20, 2004, 12:00 AM
Status
Modified
Published
Jul 27, 2004, 4:00 AM
Modified
Jun 16, 2026, 10:06 PM