Unscored CVE-2002-0810 EUVD-2002-0802GHSA-78fp-33xc-j734

Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the syncshadowdb command to the HTML output, which could …

Published Apr 2, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the syncshadowdb command to the HTML output, which could leak sensitive information, including plaintext passwords, if syncshadowdb fails.

References

4964 vdb-entry
20020608 [BUGZILLA] Security Advisory For Versions of Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2 mailing-list
bugzilla-shadow-database-information(9306) vdb-entry
6399 vdb-entry
http://bugzilla.mozilla.org/show_bug.cgi?id=92263
RHSA-2002:109 vendor-advisory