Lucene search

K
ubuntucveUbuntu.comUB:CVE-2005-3138
HistoryOct 05, 2005 - 12:00 a.m.

CVE-2005-3138

2005-10-0500:00:00
ubuntu.com
ubuntu.com
13

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.016

Percentile

87.2%

Bugzilla 2.18rc1 through 2.18.3, 2.19 through 2.20rc2, and 2.21 allows
remote attackers to obtain sensitive information such as the list of
installed products via the config.cgi file, which is accessible even when
the requirelogin parameter is set.

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.016

Percentile

87.2%

Related for UB:CVE-2005-3138