CVE-2006-5454: Medium severity Bugzilla vulnerability
Bugzilla 2.18.x before 2.18.6, 2.20.x before 2.20.3, 2.22.x before 2.22.1, and 2.23.x before 2.23.3 allow remote attackers to obtain (1) the description of arbitrary attachments by viewing the attachment in "diff" mode in attachment.cgi, and (2) the deadline field by viewing the XML format of the bug in showbug.cgi.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-5454?
CVE-2006-5454 is classified as a moderate severity vulnerability that allows remote attackers to gain unauthorized access to certain information.
How do I fix CVE-2006-5454?
To fix CVE-2006-5454, users should upgrade to Bugzilla versions 2.18.6, 2.20.3, 2.22.1, or 2.23.3 or later.
What are the affected versions in CVE-2006-5454?
CVE-2006-5454 affects Bugzilla versions 2.18.x before 2.18.6, 2.20.x before 2.20.3, 2.22.x before 2.22.1, and 2.23.x before 2.23.3.
What type of information can attackers access in CVE-2006-5454?
Attackers can access the description of arbitrary attachments and the deadline field through specific viewing modes in Bugzilla.
Is there a workaround for CVE-2006-5454?
There are no specified workarounds for CVE-2006-5454 other than upgrading to a non-vulnerable version.