PT-2004-1786 · Mozilla · Bugzilla

Publicado 2004-07-21 · Atualizado 2017-07-11 · CVE-2004-0706

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Bugzilla versions 2.17.5 through 2.17.7

Description The issue allows local users to view passwords in web server log files because the password is embedded in an image URL.

Recommendations For versions 2.17.5 through 2.17.7, consider restricting access to the web server log files to minimize the risk of password exposure until a fix is available.

Correção

Identificadores relacionados

CVE-2004-0706

Produtos afetados

Bugzilla

Referências · 6

• http://bugzilla.mozilla.org/show_bug.cgi?id=235510 · Nota
• http://marc.info/?l=bugtraq&m=108965446813639&w=2 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0706 · Nota
• http://securityfocus.com/bid/10698 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-0706 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16669 · Nota