CVE-2012-1968

Published: Jul 30, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Bugzilla 4.1.x and 4.2.x before 4.2.2 and 4.3.x before 4.3.2 uses bug-editor privileges instead of bugmail-recipient privileges during construction of HTML bugmail documents, which allows remote attackers to obtain sensitive description information by reading the tooltip portions of an HTML e-mail message.

Affected (10)

Products: Mozilla: Bugzilla

Mozilla

1 product

Bugzilla

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Mozilla Bugzilla	Version 4.1.1
Mozilla Bugzilla	Version 4.1.2
Mozilla Bugzilla	Version 4.1.3
Mozilla Bugzilla	Version 4.1
Mozilla Bugzilla	Version 4.2.1
Mozilla Bugzilla	Version 4.2
Mozilla Bugzilla	Version 4.2 rc1
Mozilla Bugzilla	Version 4.2 rc2
Mozilla Bugzilla	Version 4.3.1
Mozilla Bugzilla	Version 4.3