NetSight
IP …
high7.5

CVE-2001-1403

Bugzilla before 2.14 includes the username and password in URLs, which could allow attackers to gain privileges by reading the information from the web server …

Impact

Bugzilla before 2.14 includes the username and password in URLs, which could allow attackers to gain privileges by reading the information from the web server logs, or by "shoulder-surfing" and observing the web browser's location bar.

Affected products

VendorProductAffected versions
MozillaBugzilla
Versions 2.4, 2.6, 2.8, 2.10, 2.12, 2.14

References