low2.1
CVE-2004-0706
Bugzilla 2.17.5 through 2.17.7 embeds the password in an image URL, which could allow local users to view the password in the web server log files.
Impact
Bugzilla 2.17.5 through 2.17.7 embeds the password in an image URL, which could allow local users to view the password in the web server log files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Bugzilla | Versions 2.4, 2.6, 2.8, 2.10, 2.12, 2.14 |
References
- NVD record
- CVE.org record
- http://bugzilla.mozilla.org/show_bug.cgi?id=235510
- http://marc.info/?l=bugtraq&m=108965446813639&w=2
- http://www.securityfocus.com/bid/10698
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16669
- http://bugzilla.mozilla.org/show_bug.cgi?id=235510
- http://marc.info/?l=bugtraq&m=108965446813639&w=2
- http://www.securityfocus.com/bid/10698
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16669