CVEvulnerability
CVE-2012-4747
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-09-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
Bugzilla 2.x and 3.x through 3.6.11, 3.7.x and 4.0.x before 4.0.8, 4.1.x and 4.2.x before 4.2.3, and 4.3.x before 4.3.3 stores potentially sensitive information under the web root with insufficient access control, which allows remote attackers to read (1) template (aka .tmpl) files, (2) other custom extension files under extensions/, or (3) custom documentation files under docs/ via a direct request.
Affected configurations
• mozilla bugzilla 2.0
• mozilla bugzilla 2.2
• mozilla bugzilla 2.4
• mozilla bugzilla 2.6
• mozilla bugzilla 2.8
• mozilla bugzilla 2.9
• mozilla bugzilla 2.10
• mozilla bugzilla 2.12
• mozilla bugzilla 2.14
• mozilla bugzilla 2.14.1
• mozilla bugzilla 2.14.2
• mozilla bugzilla 2.14.3
• mozilla bugzilla 2.14.4
• mozilla bugzilla 2.14.5
• mozilla bugzilla 2.16
• mozilla bugzilla 2.16.1
• mozilla bugzilla 2.16.2
• mozilla bugzilla 2.16.3
• mozilla bugzilla 2.16.4
• mozilla bugzilla 2.16.5
• mozilla bugzilla 2.16.6
• mozilla bugzilla 2.16.7
• mozilla bugzilla 2.16.8
• mozilla bugzilla 2.16.9
• mozilla bugzilla 2.16.10
• mozilla bugzilla 2.16.11
• mozilla bugzilla 2.17
• mozilla bugzilla 2.17.1
• mozilla bugzilla 2.17.2
• mozilla bugzilla 2.17.3
• mozilla bugzilla 2.17.4
• mozilla bugzilla 2.17.5
• mozilla bugzilla 2.17.6
• mozilla bugzilla 2.17.7
• mozilla bugzilla 2.18
• mozilla bugzilla 2.18.1
• mozilla bugzilla 2.18.2
• mozilla bugzilla 2.18.3
• mozilla bugzilla 2.18.4
• mozilla bugzilla 2.18.5
• mozilla bugzilla 2.18.6
• mozilla bugzilla 2.18.6\+
• mozilla bugzilla 2.18.7
• mozilla bugzilla 2.18.8
• mozilla bugzilla 2.18.9
• mozilla bugzilla 2.19
• mozilla bugzilla 2.19.1
• mozilla bugzilla 2.19.2
• mozilla bugzilla 2.19.3
• mozilla bugzilla 2.20
• mozilla bugzilla 2.20.1
• mozilla bugzilla 2.20.2
• mozilla bugzilla 2.20.3
• mozilla bugzilla 2.20.4
• mozilla bugzilla 2.20.5
• mozilla bugzilla 2.20.6
• mozilla bugzilla 2.20.7
• mozilla bugzilla 2.21
• mozilla bugzilla 2.21.1
• mozilla bugzilla 2.21.2
… and 99 more
Related
Weakness · not in database (1)
References
- http://www.bugzilla.org/security/3.6.10/ Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=785511 Patch
- https://bugzilla.mozilla.org/show_bug.cgi?id=785522 Patch
- http://www.bugzilla.org/security/3.6.10/ Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=785511 Patch
- https://bugzilla.mozilla.org/show_bug.cgi?id=785522 Patch