CVEvulnerability
CVE-2010-3764
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-11-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The Old Charts implementation in Bugzilla 2.12 through 3.2.8, 3.4.8, 3.6.2, 3.7.3, and 4.1 creates graph files with predictable names in graphs/, which allows remote attackers to obtain sensitive information via a modified URL.
Affected configurations
• mozilla bugzilla 2.2
• mozilla bugzilla 2.4
• mozilla bugzilla 2.6
• mozilla bugzilla 2.8
• mozilla bugzilla 2.9
• mozilla bugzilla 2.12
• mozilla bugzilla 2.14
• mozilla bugzilla 2.14.1
• mozilla bugzilla 2.14.2
• mozilla bugzilla 2.14.3
• mozilla bugzilla 2.14.4
• mozilla bugzilla 2.14.5
• mozilla bugzilla 2.16
• mozilla bugzilla 2.16.1
• mozilla bugzilla 2.16.2
• mozilla bugzilla 2.16.3
• mozilla bugzilla 2.16.4
• mozilla bugzilla 2.16.5
• mozilla bugzilla 2.16.6
• mozilla bugzilla 2.16.7
• mozilla bugzilla 2.16.8
• mozilla bugzilla 2.16.9
• mozilla bugzilla 2.16.10
• mozilla bugzilla 2.16.11
• mozilla bugzilla 2.16 rc2
• mozilla bugzilla 2.17
• mozilla bugzilla 2.17.1
• mozilla bugzilla 2.17.2
• mozilla bugzilla 2.17.3
• mozilla bugzilla 2.17.4
• mozilla bugzilla 2.17.5
• mozilla bugzilla 2.17.6
• mozilla bugzilla 2.17.7
• mozilla bugzilla 2.18
• mozilla bugzilla 2.18.1
• mozilla bugzilla 2.18.2
• mozilla bugzilla 2.18.3
• mozilla bugzilla 2.18.4
• mozilla bugzilla 2.18.5
• mozilla bugzilla 2.18.6
• mozilla bugzilla 2.18.6\+
• mozilla bugzilla 2.18.7
• mozilla bugzilla 2.18.8
• mozilla bugzilla 2.18.9
• mozilla bugzilla 2.19
• mozilla bugzilla 2.19.1
• mozilla bugzilla 2.19.2
• mozilla bugzilla 2.19.3
• mozilla bugzilla 2.20
• mozilla bugzilla 2.20.1
• mozilla bugzilla 2.20.2
• mozilla bugzilla 2.20.3
• mozilla bugzilla 2.20.4
• mozilla bugzilla 2.20.5
• mozilla bugzilla 2.20.6
• mozilla bugzilla 2.20.7
• mozilla bugzilla 2.21
• mozilla bugzilla 2.21.1
• mozilla bugzilla 2.21.2
• mozilla bugzilla 2.22
… and 24 more
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050813.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050820.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050830.html lists.fedoraproject.org
- http://secunia.com/advisories/42271 secunia.com
- http://www.bugzilla.org/security/3.2.8/ Vendor Advisory
- http://www.securitytracker.com/id?1024683 www.securitytracker.com
- http://www.vupen.com/english/advisories/2010/2878 Vendor Advisory
- http://www.vupen.com/english/advisories/2010/2975 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=419014 Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62969 exchange.xforce.ibmcloud.com
- http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050813.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050820.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050830.html lists.fedoraproject.org
- http://secunia.com/advisories/42271 secunia.com
- http://www.bugzilla.org/security/3.2.8/ Vendor Advisory
- http://www.securitytracker.com/id?1024683 www.securitytracker.com
- http://www.vupen.com/english/advisories/2010/2878 Vendor Advisory
- http://www.vupen.com/english/advisories/2010/2975 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=419014 Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62969 exchange.xforce.ibmcloud.com