CVE

Id
10062  
CVE No.
CVE-2004-1634  
Status
Candidate  
Description
show_bug.cgi in Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS, when using the insidergroup feature and exporting a bug to XML, shows comments and attachment summaries which are marked as private, which allows remote attackers to gain sensitive information.  
Phase
Assigned (20050220)  
Votes
None (candidate not yet proposed)  
Comments