Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.0

Bugzilla hidden products can be viewed by outsiders

CVE-2004-0704 · published 22 years ago
Summary

Bugzilla versions 2.16 up to 2.16.5 and 2.18 before the first release candidate let people who are not logged in see products that were meant to be hidden. This could expose confidential project information. Upgrade to a newer Bugzilla release or adjust the configuration to stop hiding products until the fix is applied.

Original advisory text
Unknown vulnerability in (1) duplicates.cgi and (2) buglist.cgi in Bugzilla 2.16.x before 2.16.6, 2.18 before 2.18rc1, when configured to hide products, allows remote attackers to view hidden produ...
Unknown vulnerability in (1) duplicates.cgi and (2) buglist.cgi in Bugzilla 2.16.x before 2.16.6, 2.18 before 2.18rc1, when configured to hide products, allows remote attackers to view hidden products.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.0 Medium
Exploitation
1% chance of attack within 30 days
Timeline
Published27 Jul 2004
Updated31 Oct 2026
First seen29 Sep 2026
Sources
CVE-2004-0704 · NVD
Track software like this
Free during beta