Lucene search

K
ubuntucveUbuntu.comUB:CVE-2005-3139
HistoryOct 05, 2005 - 12:00 a.m.

CVE-2005-3139

2005-10-0500:00:00
ubuntu.com
ubuntu.com
5

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.008 Low

EPSS

Percentile

81.3%

Bugzilla 2.19.1 through 2.20rc2 and 2.21, with user matching turned on in
substring mode, allows attackers to list all users whose names match an
arbitrary substring, even when the usevisibilitygroups parameter is set.

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.008 Low

EPSS

Percentile

81.3%

Related for UB:CVE-2005-3139