CVE-2004-1634

2005-02-2005:00:00

mitre

www.cve.org

AI Score

6.8

Confidence

High

EPSS

0.002

Percentile

64.8%

JSON

show_bug.cgi in Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS, when using the insidergroup feature and exporting a bug to XML, shows comments and attachment summaries which are marked as private, which allows remote attackers to gain sensitive information.