CVE-2012-4199

Currently unrated

Key Information:

Vendor
Mozilla
Status
Bugzilla
Vendor
CVE Published:
16 November 2012

Summary

template/en/default/bug/field-events.js.tmpl in Bugzilla 3.x before 3.6.12, 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1 generates JavaScript function calls containing private product names or private component names in certain circumstances involving custom-field visibility control, which allows remote attackers to obtain sensitive information by reading HTML source code.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/80029
vdb-entryx_refsource_XF
http://www.mandriva.com/security/advisories?name=MDVSA-20...
vendor-advisoryx_refsource_MANDRIVA
http://www.bugzilla.org/security/3.6.11/
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.