CVE-2009-3989

Bugzilla before 3.0.11, 3.2.x before 3.2.6, 3.4.x before 3.4.5, and 3.5.x before 3.5.3 does not block access to files and directories that are used by custom…

published February 3, 2010

CVSS
—
EPSS
2%
Percentile
74.5
In the wild
Unconfirmed
What it is

Bugzilla before 3.0.11, 3.2.x before 3.2.6, 3.4.x before 3.4.5, and 3.5.x before 3.5.3 does not block access to files and directories that are used by custom installations, which allows remote attackers to obtain sensitive information via requests for (1) CVS/, (2) contrib/, (3) docs/en/xml/, (4) t/, or (5) old-params.txt.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01525 · 74.5th percentile
Published
2010-02-03T19:00Z
EPSS history
Timeline
  • 03 FEB 19:00Z
    Bugzilla before 3.0.11, 3.2.x before 3.2.6, 3.4.x before 3.4.5, and 3.5.x before 3.5.3 does not block access to files and directories that are used by custom…
    cvelistv5