Description
show_bug.cgi in Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS, when using the insidergroup feature and exporting a bug to XML, shows comments and attachment summaries which are marked as private, which allows remote attackers to gain sensitive information.
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2004-1628 | show_bug.cgi in Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS, when using the insidergroup feature and exporting a bug to XML, shows comments and attachment summaries which are marked as private, which allows remote attackers to gain sensitive information. |
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-08T01:00:37.073Z
Reserved: 2005-02-20T00:00:00.000Z
Link: CVE-2004-1634
No data.
Status : Modified
Published: 2004-10-25T04:00:00.000
Modified: 2026-04-16T00:27:16.627
Link: CVE-2004-1634
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD