Lucene search
HistoryJun 28, 2010 - 5:30 p.m.
CVE-2010-1204
cve
bugzilla
security vulnerability
remote attack
information disclosure
5.8 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
71.7%
Search.pm in Bugzilla 2.17.1 through 3.2.6, 3.3.1 through 3.4.6, 3.5.1 through 3.6, and 3.7 allows remote attackers to obtain potentially sensitive time-tracking information via a crafted search URL, related to a βboolean chart search.β
Related
seebug
seebug
Mozilla BugzillaζΆι΄θΏ½θΈͺεθ½δΏ‘ζ―ζ³ι²ζΌζ΄
2010-06-28 00:00:00
nessus
nessus
Fedora 12 : bugzilla-3.4.7-1.fc12 (2010-10398)
2010-07-06 00:00:00
Fedora 13 : bugzilla-3.4.7-2.fc13 (2010-10669)
2010-07-08 00:00:00
Bugzilla < 3.2.7 / 3.4.7 / 3.6.1 Multiple Vulnerabilities
2010-06-28 00:00:00
prion
prion
Design/Logic Flaw
2010-06-28 17:30:00
openvas
openvas
Bugzilla 'time-tracking' Information Disclosure Vulnerability
2010-07-06 00:00:00
Fedora Update for bugzilla FEDORA-2010-10669
2010-07-12 00:00:00
Bugzilla 'time-tracking' Information Disclosure Vulnerability
2010-07-06 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: bugzilla-3.4.7-2.fc13
2010-07-07 17:38:54
[SECURITY] Fedora 13 Update: bugzilla-3.4.10-1.fc13
2011-02-02 19:36:07
[SECURITY] Fedora 13 Update: bugzilla-3.4.9-1.fc13
2010-11-14 21:28:33
cvelist
cvelist
CVE-2010-1204
2022-10-03 16:21:01
ubuntucve
ubuntucve
CVE-2010-1204
2010-06-28 00:00:00
freebsd
freebsd
bugzilla -- information disclosure
2010-06-24 00:00:00
5.8 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
71.7%
Related for CVE-2010-1204