CVE-2012-5884 in Bugzilla
Summary
The User.get method in Bugzilla/WebService/User.pm in Bugzilla 4.3.2 allows remote attackers to obtain sensitive information about the saved searches of arbitrary users via an XMLRPC request or a JSONRPC request, a different vulnerability than CVE-2012-4198.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
11/16/2012
Disclosure
11/16/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 6962 | Mozilla Bugzilla WebService user.pm information disclosure | 200 | Proof-of-Concept | Official fix | CVE-2012-5884 |