CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-0465

Bugzilla 3.5.x and 3.6.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4.2.1, when the inbound_proxies option is enabled, does not properly validate the X-Forwarded-For HTTP header, which allows remote attackers to bypass the lockout policy via a series of authentication requests with (1) different IP address strings in this header or (2) a long string in this header.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 47.6%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2012-0465

Mozilla » Bugzilla » Version: 3.5.1

cpe:2.3:a:mozilla:bugzilla:3.5.1
Mozilla » Bugzilla » Version: 3.5.2

cpe:2.3:a:mozilla:bugzilla:3.5.2
Mozilla » Bugzilla » Version: 3.5.3

cpe:2.3:a:mozilla:bugzilla:3.5.3
Mozilla » Bugzilla » Version: 3.6.0

cpe:2.3:a:mozilla:bugzilla:3.6.0
Mozilla » Bugzilla » Version: 3.6.1

cpe:2.3:a:mozilla:bugzilla:3.6.1
Mozilla » Bugzilla » Version: 3.6.2

cpe:2.3:a:mozilla:bugzilla:3.6.2
Mozilla » Bugzilla » Version: 3.6.3

cpe:2.3:a:mozilla:bugzilla:3.6.3
Mozilla » Bugzilla » Version: 3.6.4

cpe:2.3:a:mozilla:bugzilla:3.6.4
Mozilla » Bugzilla » Version: 3.6.5

cpe:2.3:a:mozilla:bugzilla:3.6.5
Mozilla » Bugzilla » Version: 3.6.6

cpe:2.3:a:mozilla:bugzilla:3.6.6
Mozilla » Bugzilla » Version: 3.6.7

cpe:2.3:a:mozilla:bugzilla:3.6.7
Mozilla » Bugzilla » Version: 3.6.8

cpe:2.3:a:mozilla:bugzilla:3.6.8
Mozilla » Bugzilla » Version: 3.7.1

cpe:2.3:a:mozilla:bugzilla:3.7.1
Mozilla » Bugzilla » Version: 3.7.2

cpe:2.3:a:mozilla:bugzilla:3.7.2
Mozilla » Bugzilla » Version: 3.7.3

cpe:2.3:a:mozilla:bugzilla:3.7.3
Mozilla » Bugzilla » Version: 4.0.1

cpe:2.3:a:mozilla:bugzilla:4.0.1
Mozilla » Bugzilla » Version: 4.0.2

cpe:2.3:a:mozilla:bugzilla:4.0.2
Mozilla » Bugzilla » Version: 4.0.3

cpe:2.3:a:mozilla:bugzilla:4.0.3
Mozilla » Bugzilla » Version: 4.0.4

cpe:2.3:a:mozilla:bugzilla:4.0.4
Mozilla » Bugzilla » Version: 4.0.5

cpe:2.3:a:mozilla:bugzilla:4.0.5
Mozilla » Bugzilla » Version: 4.1.1

cpe:2.3:a:mozilla:bugzilla:4.1.1
Mozilla » Bugzilla » Version: 4.1.2

cpe:2.3:a:mozilla:bugzilla:4.1.2
Mozilla » Bugzilla » Version: 4.1.3

cpe:2.3:a:mozilla:bugzilla:4.1.3
Mozilla » Bugzilla » Version: 4.2

cpe:2.3:a:mozilla:bugzilla:4.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-0465

Products

Pricing

Contact Us