CVE-2005-1565: Medium severity Bugzilla vulnerability
Bugzilla 2.17.1 through 2.18, 2.19.1, and 2.19.2, when a user is prompted to log in while attempting to view a chart, displays the password in the URL, which may allow local users to gain sensitive information from web logs or browser history.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-1565?
CVE-2005-1565 is classified as a moderate severity vulnerability due to the risk of exposing sensitive information.
How do I fix CVE-2005-1565?
To fix CVE-2005-1565, upgrade to a version of Bugzilla that is not affected, such as 2.19.3 or later.
What are the potential impacts of CVE-2005-1565?
The main impact of CVE-2005-1565 is that it may allow local users to view passwords through web logs or browser history.
Which versions of Bugzilla are affected by CVE-2005-1565?
Affected versions include Bugzilla 2.17.1 through 2.19.2, as well as specific versions like 2.16.1 and 2.18-rc1.
Can CVE-2005-1565 be exploited remotely?
CVE-2005-1565 primarily affects local users who can access web logs or browser history, making remote exploitation unlikely.