CVE-2004-1634

2005-02-2005:00:00

mitre

www.cve.org

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.8%

JSON

show_bug.cgi in Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS, when using the insidergroup feature and exporting a bug to XML, shows comments and attachment summaries which are marked as private, which allows remote attackers to gain sensitive information.