4.3

CVE-2012-1969

The get_attachment_link function in Template.pm in Bugzilla 2.x and 3.x before 3.6.10, 3.7.x and 4.0.x before 4.0.7, 4.1.x and 4.2.x before 4.2.2, and 4.3.x before 4.3.2 does not check whether an attachment is private before presenting the attachment description within a public comment, which allows remote attackers to obtain sensitive description information by reading a comment.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Bugzilla Version 2.0
Mozilla ≫ Bugzilla Version 2.2
Mozilla ≫ Bugzilla Version 2.4
Mozilla ≫ Bugzilla Version 2.6
Mozilla ≫ Bugzilla Version 2.8
Mozilla ≫ Bugzilla Version 2.9
Mozilla ≫ Bugzilla Version 2.10
Mozilla ≫ Bugzilla Version 2.12
Mozilla ≫ Bugzilla Version 2.14
Mozilla ≫ Bugzilla Version 2.14.1
Mozilla ≫ Bugzilla Version 2.14.2
Mozilla ≫ Bugzilla Version 2.14.3
Mozilla ≫ Bugzilla Version 2.14.4
Mozilla ≫ Bugzilla Version 2.14.5
Mozilla ≫ Bugzilla Version 2.16
Mozilla ≫ Bugzilla Version 2.16 Update rc1
Mozilla ≫ Bugzilla Version 2.16 Update rc2
Mozilla ≫ Bugzilla Version 2.16.1
Mozilla ≫ Bugzilla Version 2.16.2
Mozilla ≫ Bugzilla Version 2.16.3
Mozilla ≫ Bugzilla Version 2.16.4
Mozilla ≫ Bugzilla Version 2.16.5
Mozilla ≫ Bugzilla Version 2.16.6
Mozilla ≫ Bugzilla Version 2.16.7
Mozilla ≫ Bugzilla Version 2.16.8
Mozilla ≫ Bugzilla Version 2.16.9
Mozilla ≫ Bugzilla Version 2.16.10
Mozilla ≫ Bugzilla Version 2.16.11
Mozilla ≫ Bugzilla Version 2.17
Mozilla ≫ Bugzilla Version 2.17.1
Mozilla ≫ Bugzilla Version 2.17.2
Mozilla ≫ Bugzilla Version 2.17.3
Mozilla ≫ Bugzilla Version 2.17.4
Mozilla ≫ Bugzilla Version 2.17.5
Mozilla ≫ Bugzilla Version 2.17.6
Mozilla ≫ Bugzilla Version 2.17.7
Mozilla ≫ Bugzilla Version 2.18
Mozilla ≫ Bugzilla Version 2.18 Update rc1
Mozilla ≫ Bugzilla Version 2.18 Update rc2
Mozilla ≫ Bugzilla Version 2.18 Update rc3
Mozilla ≫ Bugzilla Version 2.18.1
Mozilla ≫ Bugzilla Version 2.18.2
Mozilla ≫ Bugzilla Version 2.18.3
Mozilla ≫ Bugzilla Version 2.18.4
Mozilla ≫ Bugzilla Version 2.18.5
Mozilla ≫ Bugzilla Version 2.18.6
Mozilla ≫ Bugzilla Version 2.18.7
Mozilla ≫ Bugzilla Version 2.18.8
Mozilla ≫ Bugzilla Version 2.18.9
Mozilla ≫ Bugzilla Version 2.19
Mozilla ≫ Bugzilla Version 2.19.1
Mozilla ≫ Bugzilla Version 2.19.2
Mozilla ≫ Bugzilla Version 2.19.3
Mozilla ≫ Bugzilla Version 2.20
Mozilla ≫ Bugzilla Version 2.20 Update rc1
Mozilla ≫ Bugzilla Version 2.20 Update rc2
Mozilla ≫ Bugzilla Version 2.20.1
Mozilla ≫ Bugzilla Version 2.20.2
Mozilla ≫ Bugzilla Version 2.20.3
Mozilla ≫ Bugzilla Version 2.20.4
Mozilla ≫ Bugzilla Version 2.20.5
Mozilla ≫ Bugzilla Version 2.20.6
Mozilla ≫ Bugzilla Version 2.20.7
Mozilla ≫ Bugzilla Version 2.21
Mozilla ≫ Bugzilla Version 2.21.1
Mozilla ≫ Bugzilla Version 2.21.2
Mozilla ≫ Bugzilla Version 2.21.2 Update rc1
Mozilla ≫ Bugzilla Version 2.22
Mozilla ≫ Bugzilla Version 2.22 Update rc1
Mozilla ≫ Bugzilla Version 2.22.1
Mozilla ≫ Bugzilla Version 2.22.2
Mozilla ≫ Bugzilla Version 2.22.3
Mozilla ≫ Bugzilla Version 2.22.4
Mozilla ≫ Bugzilla Version 2.22.5
Mozilla ≫ Bugzilla Version 2.22.6
Mozilla ≫ Bugzilla Version 2.22.7
Mozilla ≫ Bugzilla Version 2.23
Mozilla ≫ Bugzilla Version 2.23.1
Mozilla ≫ Bugzilla Version 2.23.2
Mozilla ≫ Bugzilla Version 2.23.3
Mozilla ≫ Bugzilla Version 2.23.4
Mozilla ≫ Bugzilla Version 3.0
Mozilla ≫ Bugzilla Version 3.0 Update rc1
Mozilla ≫ Bugzilla Version 3.0.0
Mozilla ≫ Bugzilla Version 3.0.1
Mozilla ≫ Bugzilla Version 3.0.2
Mozilla ≫ Bugzilla Version 3.0.3
Mozilla ≫ Bugzilla Version 3.0.4
Mozilla ≫ Bugzilla Version 3.0.5
Mozilla ≫ Bugzilla Version 3.0.6
Mozilla ≫ Bugzilla Version 3.0.7
Mozilla ≫ Bugzilla Version 3.0.8
Mozilla ≫ Bugzilla Version 3.0.9
Mozilla ≫ Bugzilla Version 3.0.10
Mozilla ≫ Bugzilla Version 3.0.11
Mozilla ≫ Bugzilla Version 3.1.0
Mozilla ≫ Bugzilla Version 3.1.1
Mozilla ≫ Bugzilla Version 3.1.2
Mozilla ≫ Bugzilla Version 3.1.3
Mozilla ≫ Bugzilla Version 3.1.4
Mozilla ≫ Bugzilla Version 3.2
Mozilla ≫ Bugzilla Version 3.2 Update rc1
Mozilla ≫ Bugzilla Version 3.2 Update rc2
Mozilla ≫ Bugzilla Version 3.2.1
Mozilla ≫ Bugzilla Version 3.2.2
Mozilla ≫ Bugzilla Version 3.2.3
Mozilla ≫ Bugzilla Version 3.2.4
Mozilla ≫ Bugzilla Version 3.2.5
Mozilla ≫ Bugzilla Version 3.2.6
Mozilla ≫ Bugzilla Version 3.2.7
Mozilla ≫ Bugzilla Version 3.2.8
Mozilla ≫ Bugzilla Version 3.2.9
Mozilla ≫ Bugzilla Version 3.2.10
Mozilla ≫ Bugzilla Version 3.3
Mozilla ≫ Bugzilla Version 3.3.1
Mozilla ≫ Bugzilla Version 3.3.2
Mozilla ≫ Bugzilla Version 3.3.3
Mozilla ≫ Bugzilla Version 3.3.4
Mozilla ≫ Bugzilla Version 3.4
Mozilla ≫ Bugzilla Version 3.4 Update rc1
Mozilla ≫ Bugzilla Version 3.4.1
Mozilla ≫ Bugzilla Version 3.4.2
Mozilla ≫ Bugzilla Version 3.4.3
Mozilla ≫ Bugzilla Version 3.4.4
Mozilla ≫ Bugzilla Version 3.4.5
Mozilla ≫ Bugzilla Version 3.4.6
Mozilla ≫ Bugzilla Version 3.4.7
Mozilla ≫ Bugzilla Version 3.4.8
Mozilla ≫ Bugzilla Version 3.4.9
Mozilla ≫ Bugzilla Version 3.4.10
Mozilla ≫ Bugzilla Version 3.4.11
Mozilla ≫ Bugzilla Version 3.4.12
Mozilla ≫ Bugzilla Version 3.4.13
Mozilla ≫ Bugzilla Version 3.5
Mozilla ≫ Bugzilla Version 3.5.1
Mozilla ≫ Bugzilla Version 3.5.2
Mozilla ≫ Bugzilla Version 3.5.3
Mozilla ≫ Bugzilla Version 3.6
Mozilla ≫ Bugzilla Version 3.6 Update rc1
Mozilla ≫ Bugzilla Version 3.6.0
Mozilla ≫ Bugzilla Version 3.6.1
Mozilla ≫ Bugzilla Version 3.6.2
Mozilla ≫ Bugzilla Version 3.6.3
Mozilla ≫ Bugzilla Version 3.6.4
Mozilla ≫ Bugzilla Version 3.6.5
Mozilla ≫ Bugzilla Version 3.6.6
Mozilla ≫ Bugzilla Version 3.6.7
Mozilla ≫ Bugzilla Version 3.6.8
Mozilla ≫ Bugzilla Version 3.6.9
Mozilla ≫ Bugzilla Version 3.7
Mozilla ≫ Bugzilla Version 3.7.1
Mozilla ≫ Bugzilla Version 3.7.2
Mozilla ≫ Bugzilla Version 3.7.3
Mozilla ≫ Bugzilla Version 4.0
Mozilla ≫ Bugzilla Version 4.0 Update rc1
Mozilla ≫ Bugzilla Version 4.0 Update rc2
Mozilla ≫ Bugzilla Version 4.0.1
Mozilla ≫ Bugzilla Version 4.0.2
Mozilla ≫ Bugzilla Version 4.0.3
Mozilla ≫ Bugzilla Version 4.0.4
Mozilla ≫ Bugzilla Version 4.0.5
Mozilla ≫ Bugzilla Version 4.0.6
Mozilla ≫ Bugzilla Version 4.1
Mozilla ≫ Bugzilla Version 4.1.1
Mozilla ≫ Bugzilla Version 4.1.2
Mozilla ≫ Bugzilla Version 4.1.3
Mozilla ≫ Bugzilla Version 4.2
Mozilla ≫ Bugzilla Version 4.2 Update rc1
Mozilla ≫ Bugzilla Version 4.2 Update rc2
Mozilla ≫ Bugzilla Version 4.2.1
Mozilla ≫ Bugzilla Version 4.3
Mozilla ≫ Bugzilla Version 4.3.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.55% 0.719
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/50040
http://www.bugzilla.org/security/3.6.9/
http://www.mandriva.com/security/advisories?name=MDVSA-2013:066
https://bugzilla.mozilla.org/show_bug.cgi?id=777586