Vulnerability Details CVE-2004-1634
show_bug.cgi in Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS, when using the insidergroup feature and exporting a bug to XML, shows comments and attachment summaries which are marked as private, which allows remote attackers to gain sensitive information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 62.2%
CVSS Severity
CVSS v2 Score 5.0
References
- http://marc.info/?l=bugtraq&m=109872095201238&w=2
- http://www.securityfocus.com/bid/11511
- https://bugzilla.mozilla.org/show_bug.cgi?id=263780
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17841
- http://marc.info/?l=bugtraq&m=109872095201238&w=2
- http://www.securityfocus.com/bid/11511
- https://bugzilla.mozilla.org/show_bug.cgi?id=263780
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17841
Products affected by CVE-2004-1634
-
cpe:2.3:a:mozilla:bugzilla:2.10
-
cpe:2.3:a:mozilla:bugzilla:2.12
-
cpe:2.3:a:mozilla:bugzilla:2.14
-
cpe:2.3:a:mozilla:bugzilla:2.14.1
-
cpe:2.3:a:mozilla:bugzilla:2.14.2
-
cpe:2.3:a:mozilla:bugzilla:2.14.3
-
cpe:2.3:a:mozilla:bugzilla:2.14.4
-
cpe:2.3:a:mozilla:bugzilla:2.14.5
-
cpe:2.3:a:mozilla:bugzilla:2.16
-
cpe:2.3:a:mozilla:bugzilla:2.16.1
-
cpe:2.3:a:mozilla:bugzilla:2.16.2
-
cpe:2.3:a:mozilla:bugzilla:2.16.3
-
cpe:2.3:a:mozilla:bugzilla:2.16.4
-
cpe:2.3:a:mozilla:bugzilla:2.16.5
-
cpe:2.3:a:mozilla:bugzilla:2.17
-
cpe:2.3:a:mozilla:bugzilla:2.17.1
-
cpe:2.3:a:mozilla:bugzilla:2.17.3
-
cpe:2.3:a:mozilla:bugzilla:2.17.4
-
cpe:2.3:a:mozilla:bugzilla:2.17.5
-
cpe:2.3:a:mozilla:bugzilla:2.17.6
-
cpe:2.3:a:mozilla:bugzilla:2.17.7
-
cpe:2.3:a:mozilla:bugzilla:2.18
-
cpe:2.3:a:mozilla:bugzilla:2.4
-
cpe:2.3:a:mozilla:bugzilla:2.6
-
cpe:2.3:a:mozilla:bugzilla:2.8