CVE-2012-4197 in Bugzilla

Sumário (Inglês)

Bugzilla/Attachment.pm in attachment.cgi in Bugzilla 2.x and 3.x before 3.6.12, 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1 allows remote attackers to read attachment descriptions from private bugs via an obsolete=1 insert action.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

08/08/2012

Divulgação

16/11/2012

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
6946	Bugzilla code-error.html.tmpl Divulgação de Informação	200	Prova de conceito	Correção oficial	CVE-2012-4197

Fontes

• MITRE
• NVD
• CVE Details