Security Advisory

CVE-2004-1634

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-02-20 05:00:00
Last updated 2024-08-08 01:00:37
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

show_bug.cgi in Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS, when using the insidergroup feature and exporting a bug to XML, shows comments and attachment summaries which are marked as private, which allows remote attackers to gain sensitive information.