The User.get method in Bugzilla/WebService/User.pm in Bugzilla 4.3.2 allows remote attackers to obtain sensitive information about the saved searches of arbitrary users via an XMLRPC request or a JSONRPC request, a different vulnerability than CVE-2012-4198.
References
Configurations
History
No history.
Information
Published : 2012-11-16 12:24
Updated : 2024-02-04 18:16
NVD link : CVE-2012-5884
Mitre link : CVE-2012-5884
CVE.ORG link : CVE-2012-5884
JSON object : View
Products Affected
mozilla
- bugzilla
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor