CVE Vulnerabilities

CVE-2004-0706

Published: Jul 27, 2004 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Bugzilla 2.17.5 through 2.17.7 embeds the password in an image URL, which could allow local users to view the password in the web server log files.

Affected Software

Name Vendor Start Version End Version
Bugzilla Mozilla 2.4 2.4
Bugzilla Mozilla 2.6 2.6
Bugzilla Mozilla 2.8 2.8
Bugzilla Mozilla 2.10 2.10
Bugzilla Mozilla 2.12 2.12
Bugzilla Mozilla 2.14 2.14
Bugzilla Mozilla 2.14.1 2.14.1
Bugzilla Mozilla 2.14.2 2.14.2
Bugzilla Mozilla 2.14.3 2.14.3
Bugzilla Mozilla 2.14.4 2.14.4
Bugzilla Mozilla 2.14.5 2.14.5
Bugzilla Mozilla 2.16 2.16
Bugzilla Mozilla 2.16.1 2.16.1
Bugzilla Mozilla 2.16.2 2.16.2
Bugzilla Mozilla 2.16.3 2.16.3
Bugzilla Mozilla 2.16.4 2.16.4
Bugzilla Mozilla 2.16.5 2.16.5
Bugzilla Mozilla 2.17 2.17
Bugzilla Mozilla 2.17.1 2.17.1
Bugzilla Mozilla 2.17.3 2.17.3
Bugzilla Mozilla 2.17.4 2.17.4
Bugzilla Mozilla 2.17.5 2.17.5
Bugzilla Mozilla 2.17.6 2.17.6
Bugzilla Mozilla 2.17.7 2.17.7

References