Security Advisory

CVE-2012-4197

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2012-11-16 11:00:00

Last updated 2024-08-06 20:28:07

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Bugzilla/Attachment.pm in attachment.cgi in Bugzilla 2.x and 3.x before 3.6.12, 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1 allows remote attackers to read attachment descriptions from private bugs via an obsolete=1 insert action.

← Browse all CVEs View on cve.org ↗