CVE-2005-3138
N/A
N/A
Summary
Bugzilla 2.18rc1 through 2.18.3, 2.19 through 2.20rc2, and 2.21 allows remote attackers to obtain sensitive information such as the list of installed products via the config.cgi file, which is accessible even when the requirelogin parameter is set.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://secunia.com/advisories/17030/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22490
- http://www.bugzilla.org/security/2.18.4/
- http://marc.info/?l=bugtraq&m=112818466125484&w=2
- http://www.securityfocus.com/bid/14995
References
- http://secunia.com/advisories/17030/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22490
- http://www.bugzilla.org/security/2.18.4/
- http://marc.info/?l=bugtraq&m=112818466125484&w=2
- http://www.securityfocus.com/bid/14995
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.