CVE-2005-3139

Bugzilla 2.19.1 through 2.20rc2 and 2.21, with user matching turned on in substring mode, allows attackers to list all users whose names match an arbitrary…

published October 5, 2005

CVSS
—
EPSS
1%
Percentile
61.7
In the wild
Unconfirmed
What it is

Bugzilla 2.19.1 through 2.20rc2 and 2.21, with user matching turned on in substring mode, allows attackers to list all users whose names match an arbitrary substring, even when the usevisibilitygroups parameter is set.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00975 · 61.7th percentile
Published
2005-10-05T04:00Z
EPSS history
Timeline
  • 05 OCT 04:00Z
    Bugzilla 2.19.1 through 2.20rc2 and 2.21, with user matching turned on in substring mode, allows attackers to list all users whose names match an arbitrary…
    cvelistv5