CVE

Id
68866  
CVE No.
CVE-2014-1571  
Status
Candidate  
Description
Bugzilla 2.x through 4.0.x before 4.0.15, 4.1.x and 4.2.x before 4.2.11, 4.3.x and 4.4.x before 4.4.6, and 4.5.x before 4.5.6 allows remote authenticated users to obtain sensitive private-comment information by leveraging a role as a flag recipient, related to Bug.pm, Flag.pm, and a mail template.  
Phase
Assigned (20140116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
662371 68866 CVE-2014-1571 MISC:http://packetstormsecurity.com/files/128578/Bugzilla-Account-Creation-XSS-Information-Leak.html  View
662372 68866 CVE-2014-1571 CONFIRM:http://www.bugzilla.org/security/4.0.14/  View
662373 68866 CVE-2014-1571 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1064140  View
662374 68866 CVE-2014-1571 CONFIRM:http://advisories.mageia.org/MGASA-2014-0412.html  View
662375 68866 CVE-2014-1571 FEDORA:FEDORA-2014-12530  View
662376 68866 CVE-2014-1571 URL:http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141321.html  View
662377 68866 CVE-2014-1571 FEDORA:FEDORA-2014-12584  View
662378 68866 CVE-2014-1571 URL:http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141309.html  View
662379 68866 CVE-2014-1571 FEDORA:FEDORA-2014-12591  View
662380 68866 CVE-2014-1571 URL:http://lists.fedoraproject.org/pipermail/package-announce/2014-November/142524.html  View
662381 68866 CVE-2014-1571 MANDRIVA:MDVSA-2014:200  View
662382 68866 CVE-2014-1571 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2014:200  View
662383 68866 CVE-2014-1571 SECTRACK:1030978  View

Related JVN