Lucene search
MitreCVELIST:CVE-2012-4198HistoryNov 16, 2012 - 11:00 a.m.
CVE-2012-4198
2012-11-1611:00:00
mitre
www.cve.org
7
The User.get method in Bugzilla/WebService/User.pm in Bugzilla 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1 has a different outcome for a groups request depending on whether a group exists, which allows remote authenticated users to discover private group names by observing whether a call throws an error.
Related
ubuntucve
ubuntucve
CVE-2012-4198
2012-11-16 00:00:00
CVE-2012-5884
2012-11-16 00:00:00
seebug
seebug
Bugzilla User.get()çťäżĄćŻćłé˛ćźć´
2012-11-19 00:00:00
prion
prion
Design/Logic Flaw
2012-11-16 12:24:00
Design/Logic Flaw
2012-11-16 12:24:00
cve
cve
CVE-2012-4198
2012-11-16 12:24:24
CVE-2012-5884
2012-11-16 12:24:24
nvd
nvd
CVE-2012-4198
2012-11-16 12:24:24
CVE-2012-5884
2012-11-16 12:24:24
cvelist
cvelist
CVE-2012-5884
2012-11-16 11:00:00
openvas
openvas
FreeBSD Ports: bugzilla
2012-11-26 00:00:00
FreeBSD Ports: bugzilla
2012-11-26 00:00:00
securityvulns
securityvulns
Security advisory for Bugzilla 4.4rc1, 4.2.4, 4.0.9 and 3.6.12
2012-11-18 00:00:00
nessus
nessus
Bugzilla < 3.6.12 / 4.0.9 / 4.2.4 / 4.4rc1 Multiple Vulnerabilities
2012-11-20 00:00:00
FreeBSD : bugzilla -- multiple vulnerabilities (2b841f88-2e8d-11e2-ad21-20cf30e32f6d)
2012-11-19 00:00:00
Mandriva Linux Security Advisory : bugzilla (MDVSA-2013:066)
2013-04-20 00:00:00
freebsd
freebsd
bugzilla -- multiple vulnerabilities
2012-11-13 00:00:00