Security Advisory
CVE-2004-0706
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Bugzilla 2.17.5 through 2.17.7 embeds the password in an image URL, which could allow local users to view the password in the web server log files.