CVE-2009-3989 in Bugzilla

सारांश

द्वारा VulDB • 07/07/2026

Bugzilla versions before 3.0.11, 3.2.x before 3.2.6, 3.4.x before 3.4.5, and 3.5.x before 3.5.3 do not block access to files and directories used by custom installations, which allows remote attackers to obtain sensitive information via requests for (1) CVS/, (2) contrib/, (3) docs/en/xml/, (4) t/, or (5) old-params.txt.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• आरक्षित करना: 19/11/2009
• प्रकटीकरण: 03/02/2010
• संयम: स्वीकृत
• प्रविष्टि: VDB-51732
• CPE: तैयार
• CWE: CWE-264 (पुष्टि की गई)
• CVSS: 4.3 (NVD)
• EPSS: 0.01531
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Telecommunication, Finance, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2009-3989
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2009-3989
• CVE Details: https://www.cvedetails.com/cve/CVE-2009-3989/