CVE-2004-1635

CVE-2004-1635 affects Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS when using the insidergroup feature. The issue: private attachments are not adequately protected if metadata (filename, description, MIME type, or review flags) changes, allowing remote authenticated users to disclose sensiti...

CVE-2004-1635

Bugzilla 2.17.1 through 2.18rc2 and 2.19 from cvs, when using the insidergroup feature, does not sufficiently protect private attachments when there are changes to the metadata, such as filename, description, MIME type, or review flags, which allows remote authenticated users to obtain sensitive...