CVE

Id
7869  
CVE No.
CVE-2003-1045  
Status
Candidate  
Description
votes.cgi in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote attackers to read a user"s voting page when that user has voted on a restricted bug, which allows remote attackers to read potentially sensitive voting information by modifying the who parameter.  
Phase
Assigned (20040527)  
Votes
None (candidate not yet proposed)  
Comments