Lucene search
HistoryJun 28, 2010 - 5:30 p.m.
CVE-2010-1204
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
5.9 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.8%
Search.pm in Bugzilla 2.17.1 through 3.2.6, 3.3.1 through 3.4.6, 3.5.1 through 3.6, and 3.7 allows remote attackers to obtain potentially sensitive time-tracking information via a crafted search URL, related to a βboolean chart search.β
Affected configurations
Node
mozillabugzillaMatch2.17.1
ORmozillabugzillaMatch2.17.3
ORmozillabugzillaMatch2.17.4
ORmozillabugzillaMatch2.17.5
ORmozillabugzillaMatch2.17.6
ORmozillabugzillaMatch2.17.7
ORmozillabugzillaMatch3.0
ORmozillabugzillaMatch3.0.1
ORmozillabugzillaMatch3.0.2
ORmozillabugzillaMatch3.0.3
ORmozillabugzillaMatch3.0.4
ORmozillabugzillaMatch3.0.5
ORmozillabugzillaMatch3.0.6
ORmozillabugzillaMatch3.0.7
ORmozillabugzillaMatch3.0.8
ORmozillabugzillaMatch3.0.9
ORmozillabugzillaMatch3.0.10
ORmozillabugzillaMatch3.0.11
ORmozillabugzillaMatch3.1.1
ORmozillabugzillaMatch3.1.2
ORmozillabugzillaMatch3.1.3
ORmozillabugzillaMatch3.1.4
ORmozillabugzillaMatch3.2
ORmozillabugzillaMatch3.2.1
ORmozillabugzillaMatch3.2.2
ORmozillabugzillaMatch3.2.3
ORmozillabugzillaMatch3.2.4
ORmozillabugzillaMatch3.2.5
ORmozillabugzillaMatch3.2.6
ORmozillabugzillaMatch3.3.1
ORmozillabugzillaMatch3.3.3
ORmozillabugzillaMatch3.3.4
ORmozillabugzillaMatch3.4
ORmozillabugzillaMatch3.4.1
ORmozillabugzillaMatch3.4.2
ORmozillabugzillaMatch3.4.3
ORmozillabugzillaMatch3.4.4
ORmozillabugzillaMatch3.4.5
ORmozillabugzillaMatch3.4.6
ORmozillabugzillaMatch3.5.1
ORmozillabugzillaMatch3.5.2
ORmozillabugzillaMatch3.5.3
ORmozillabugzillaMatch3.6
ORmozillabugzillaMatch3.7
Related
openvas
openvas
Fedora Update for bugzilla FEDORA-2011-0755
2011-02-04 00:00:00
Fedora Update for bugzilla FEDORA-2010-10669
2010-07-12 00:00:00
Fedora Update for bugzilla FEDORA-2010-10669
2010-07-12 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: bugzilla-3.4.10-1.fc13
2011-02-02 19:36:07
[SECURITY] Fedora 13 Update: bugzilla-3.4.7-2.fc13
2010-07-07 17:38:54
[SECURITY] Fedora 13 Update: bugzilla-3.4.9-1.fc13
2010-11-14 21:28:33
nessus
nessus
Fedora 13 : bugzilla-3.4.7-2.fc13 (2010-10669)
2010-07-08 00:00:00
Fedora 12 : bugzilla-3.4.7-1.fc12 (2010-10398)
2010-07-06 00:00:00
cvelist
cvelist
CVE-2010-1204
2022-10-03 16:21:01
seebug
seebug
Mozilla BugzillaζΆι΄θΏ½θΈͺεθ½δΏ‘ζ―ζ³ι²ζΌζ΄
2010-06-28 00:00:00
prion
prion
Design/Logic Flaw
2010-06-28 17:30:00
cve
cve
CVE-2010-1204
2022-10-03 16:21:01
ubuntucve
ubuntucve
CVE-2010-1204
2010-06-28 00:00:00
freebsd
freebsd
bugzilla -- information disclosure
2010-06-24 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
5.9 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.8%
Related for NVD:CVE-2010-1204