CVE Vulnerabilities

CVE-2012-4747

Published: Sep 04, 2012 | Modified: Sep 04, 2012
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Bugzilla 2.x and 3.x through 3.6.11, 3.7.x and 4.0.x before 4.0.8, 4.1.x and 4.2.x before 4.2.3, and 4.3.x before 4.3.3 stores potentially sensitive information under the web root with insufficient access control, which allows remote attackers to read (1) template (aka .tmpl) files, (2) other custom extension files under extensions/, or (3) custom documentation files under docs/ via a direct request.

Affected Software

Name Vendor Start Version End Version
Bugzilla Mozilla 2.0 2.0
Bugzilla Mozilla 2.18.6+ 2.18.6+
Bugzilla Mozilla 2.16.8 2.16.8
Bugzilla Mozilla 2.22.7 2.22.7
Bugzilla Mozilla 2.18.8 2.18.8
Bugzilla Mozilla 2.17.6 2.17.6
Bugzilla Mozilla 2.16 2.16
Bugzilla Mozilla 2.18.5 2.18.5
Bugzilla Mozilla 2.19.3 2.19.3
Bugzilla Mozilla 2.20 2.20
Bugzilla Mozilla 2.18.6 2.18.6
Bugzilla Mozilla 2.17.2 2.17.2
Bugzilla Mozilla 2.20 2.20
Bugzilla Mozilla 2.16.1 2.16.1
Bugzilla Mozilla 2.20 2.20
Bugzilla Mozilla 2.19 2.19
Bugzilla Mozilla 2.18 2.18
Bugzilla Mozilla 2.16.2 2.16.2
Bugzilla Mozilla 2.16.11 2.16.11
Bugzilla Mozilla 2.20.5 2.20.5
Bugzilla Mozilla 2.20.6 2.20.6
Bugzilla Mozilla 2.22.3 2.22.3
Bugzilla Mozilla 2.22.6 2.22.6
Bugzilla Mozilla 2.17.4 2.17.4
Bugzilla Mozilla 2.16 2.16
Bugzilla Mozilla 2.23.2 2.23.2
Bugzilla Mozilla 2.21.2 2.21.2
Bugzilla Mozilla 2.10 2.10
Bugzilla Mozilla 2.17.1 2.17.1
Bugzilla Mozilla 2.16 2.16
Bugzilla Mozilla 2.22.1 2.22.1
Bugzilla Mozilla 2.23.4 2.23.4
Bugzilla Mozilla 2.16.9 2.16.9
Bugzilla Mozilla 2.20.1 2.20.1
Bugzilla Mozilla 2.23.3 2.23.3
Bugzilla Mozilla 2.14.2 2.14.2
Bugzilla Mozilla 2.18.7 2.18.7
Bugzilla Mozilla 2.23.1 2.23.1
Bugzilla Mozilla 2.22.2 2.22.2
Bugzilla Mozilla 2.18.1 2.18.1
Bugzilla Mozilla 2.22 2.22
Bugzilla Mozilla 2.14.3 2.14.3
Bugzilla Mozilla 2.22.5 2.22.5
Bugzilla Mozilla 2.14.4 2.14.4
Bugzilla Mozilla 2.19.1 2.19.1
Bugzilla Mozilla 2.16.7 2.16.7
Bugzilla Mozilla 2.6 2.6
Bugzilla Mozilla 2.17.5 2.17.5
Bugzilla Mozilla 2.22 2.22
Bugzilla Mozilla 2.17.3 2.17.3
Bugzilla Mozilla 2.4 2.4
Bugzilla Mozilla 2.16.4 2.16.4
Bugzilla Mozilla 2.12 2.12
Bugzilla Mozilla 2.21.2 2.21.2
Bugzilla Mozilla 2.20.3 2.20.3
Bugzilla Mozilla 2.8 2.8
Bugzilla Mozilla 2.2 2.2
Bugzilla Mozilla 2.18.4 2.18.4
Bugzilla Mozilla 2.16.3 2.16.3
Bugzilla Mozilla 2.14.5 2.14.5
Bugzilla Mozilla 2.18.9 2.18.9
Bugzilla Mozilla 2.18 2.18
Bugzilla Mozilla 2.18.3 2.18.3
Bugzilla Mozilla 2.17.7 2.17.7
Bugzilla Mozilla 2.20.7 2.20.7
Bugzilla Mozilla 2.20.2 2.20.2
Bugzilla Mozilla 2.20.4 2.20.4
Bugzilla Mozilla 2.21.1 2.21.1
Bugzilla Mozilla 2.18 2.18
Bugzilla Mozilla 2.17 2.17
Bugzilla Mozilla 2.23 2.23
Bugzilla Mozilla 2.16.6 2.16.6
Bugzilla Mozilla 2.9 2.9
Bugzilla Mozilla 2.18.2 2.18.2
Bugzilla Mozilla 2.18 2.18
Bugzilla Mozilla 2.14.1 2.14.1
Bugzilla Mozilla 2.22.4 2.22.4
Bugzilla Mozilla 2.21 2.21
Bugzilla Mozilla 2.16.5 2.16.5
Bugzilla Mozilla 2.14 2.14
Bugzilla Mozilla 2.19.2 2.19.2
Bugzilla Mozilla 2.16.10 2.16.10

References