CVE-2012-5884: Infoleak
The User.get method in Bugzilla/WebService/User.pm in Bugzilla 4.3.2 allows remote attackers to obtain sensitive information about the saved searches of arbitrary users via an XMLRPC request or a JSONRPC request, a different vulnerability than CVE-2012-4198.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-5884?
CVE-2012-5884 is considered a medium severity vulnerability due to its ability to expose sensitive user information.
How do I fix CVE-2012-5884?
To mitigate CVE-2012-5884, upgrade Bugzilla to a version later than 4.3.2 where the vulnerability has been addressed.
What type of attacks can exploit CVE-2012-5884?
CVE-2012-5884 can be exploited through remote XMLRPC or JSONRPC requests to retrieve saved searches of arbitrary users.
Which versions of Bugzilla are affected by CVE-2012-5884?
CVE-2012-5884 affects Bugzilla version 4.3.2 specifically.
What is the impact of CVE-2012-5884 on users?
The impact of CVE-2012-5884 is that it allows attackers to gain unauthorized access to personal search information of users.