Lucene search
Ubuntu.comUB:CVE-2007-4539HistoryAug 27, 2007 - 12:00 a.m.
CVE-2007-4539
2007-08-2700:00:00
ubuntu.com
ubuntu.com
16
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
0.004
Percentile
73.9%
The WebService (XML-RPC) interface in Bugzilla 2.23.3 through 3.0.0 does
not enforce permissions for the time-tracking fields of bugs, which allows
remote attackers to obtain sensitive information via certain XML-RPC
requests, as demonstrated by the (1) Deadline and (2) Estimated Time
fields.
Notes
| Author | Note |
|---|---|
| jdstrand | 2.23.3 through 3.0.0 only |
Related
prion
prion
Design/Logic Flaw
2007-08-27 21:17:00
cvelist
cvelist
CVE-2007-4539
2007-08-27 21:00:00
nvd
nvd
CVE-2007-4539
2007-08-27 21:17:00
cve
cve
CVE-2007-4539
2007-08-27 21:17:00
openvas
openvas
FreeBSD Ports: bugzilla, ja-bugzilla
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200709-18 (bugzilla)
2008-09-24 00:00:00
FreeBSD Ports: bugzilla, ja-bugzilla
2008-09-04 00:00:00
nessus
nessus
GLSA-200709-18 : Bugzilla: Multiple vulnerabilities
2007-10-03 00:00:00
gentoo
gentoo
Bugzilla: Multiple vulnerabilities
2007-09-30 00:00:00
freebsd
freebsd
bugzilla -- multiple vulnerabilities
2007-08-23 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
0.004
Percentile
73.9%
Related for UB:CVE-2007-4539