CVE-2014-1571 in Mozilla Bugzilla
Resumen (Inglés)
Bugzilla 2.x through 4.0.x before 4.0.15, 4.1.x and 4.2.x before 4.2.11, 4.3.x and 4.4.x before 4.4.6, and 4.5.x before 4.5.6 allows remote authenticated users to obtain sensitive private-comment information by leveraging a role as a flag recipient, related to Bug.pm, Flag.pm, and a mail template.
Reservar
2014-01-16
Divulgación
2014-10-12
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 67733 | Mozilla Bugzilla Comment divulgación de información | 200 | No probado | Arreglo oficial | CVE-2014-1571 |