CVE-2004-1634

Published Feb 20, 2005 CVSS 2.0 · 5.0 Medium EPSS 1.2% KEV · Not listed
Description
show_bug.cgi in Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS, when using the insidergroup feature and exporting a bug to XML, shows comments and attachment summaries which are marked as private, which allows remote attackers to gain sensitive information.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2004-1628 show_bug.cgi in Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS, when using the insidergroup feature and exporting a bug to XML, shows comments and attachment summaries which are marked as private, which allows remote attackers to gain sensitive information.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 8, 2024, 1:00 AM
Reserved
Feb 20, 2005, 12:00 AM
Status
Modified
Published
Oct 25, 2004, 4:00 AM
Modified
Jun 16, 2026, 10:08 PM