CVE-2002-0810

Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the syncshadowdb command to the HTML output, which could leak sensitive…

published April 2, 2003

CVSS
—
EPSS
1%
Percentile
67.7
In the wild
Unconfirmed
What it is

Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the syncshadowdb command to the HTML output, which could leak sensitive information, including plaintext passwords, if syncshadowdb fails.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01196 · 67.7th percentile
Published
2003-04-02T05:00Z
EPSS history
Timeline
  • 02 APR 05:00Z
    Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the syncshadowdb command to the HTML output, which could leak sensitive…
    cvelistv5