CVE-2010-1204

Published: Jun 28, 2010Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Search.pm in Bugzilla 2.17.1 through 3.2.6, 3.3.1 through 3.4.6, 3.5.1 through 3.6, and 3.7 allows remote attackers to obtain potentially sensitive time-tracking information via a crafted search URL, related to a "boolean chart search."

Affected (44)

Products: Mozilla: Bugzilla

Mozilla

1 product

Bugzilla

Configuration A

44 vulnerable

Vulnerable Software	Affected Versions
Mozilla Bugzilla	Version 2.17.1
Mozilla Bugzilla	Version 2.17.3
Mozilla Bugzilla	Version 2.17.4
Mozilla Bugzilla	Version 2.17.5
Mozilla Bugzilla	Version 2.17.6
Mozilla Bugzilla	Version 2.17.7
Mozilla Bugzilla	Version 3.0.10
Mozilla Bugzilla	Version 3.0.11
Mozilla Bugzilla	Version 3.0.1
Mozilla Bugzilla	Version 3.0.2
Mozilla Bugzilla	Version 3.0.3
Mozilla Bugzilla	Version 3.0.4
Mozilla Bugzilla	Version 3.0.5
Mozilla Bugzilla	Version 3.0.6
Mozilla Bugzilla	Version 3.0.7
Mozilla Bugzilla	Version 3.0.8
Mozilla Bugzilla	Version 3.0.9
Mozilla Bugzilla	Version 3.0
Mozilla Bugzilla	Version 3.1.1
Mozilla Bugzilla	Version 3.1.2
Mozilla Bugzilla	Version 3.1.3
Mozilla Bugzilla	Version 3.1.4
Mozilla Bugzilla	Version 3.2.1
Mozilla Bugzilla	Version 3.2.2
Mozilla Bugzilla	Version 3.2.3
Mozilla Bugzilla	Version 3.2.4
Mozilla Bugzilla	Version 3.2.5
Mozilla Bugzilla	Version 3.2.6
Mozilla Bugzilla	Version 3.2
Mozilla Bugzilla	Version 3.3.1
Mozilla Bugzilla	Version 3.3.3
Mozilla Bugzilla	Version 3.3.4
Mozilla Bugzilla	Version 3.4.1
Mozilla Bugzilla	Version 3.4.2
Mozilla Bugzilla	Version 3.4.3
Mozilla Bugzilla	Version 3.4.4
Mozilla Bugzilla	Version 3.4.5
Mozilla Bugzilla	Version 3.4.6
Mozilla Bugzilla	Version 3.4
Mozilla Bugzilla	Version 3.5.1
Mozilla Bugzilla	Version 3.5.2
Mozilla Bugzilla	Version 3.5.3
Mozilla Bugzilla	Version 3.6
Mozilla Bugzilla	Version 3.7