4.3
CVSSv2

CVE-2012-4199

Published: 16/11/2012 Updated: 29/08/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Vulnerability Summary

template/en/default/bug/field-events.js.tmpl in Bugzilla 3.x prior to 3.6.12, 3.7.x and 4.0.x prior to 4.0.9, 4.1.x and 4.2.x prior to 4.2.4, and 4.3.x and 4.4.x prior to 4.4rc1 generates JavaScript function calls containing private product names or private component names in certain circumstances involving custom-field visibility control, which allows remote malicious users to obtain sensitive information by reading HTML source code.

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla bugzilla 3.0

mozilla bugzilla 3.6

mozilla bugzilla 3.2

mozilla bugzilla 3.2.6

mozilla bugzilla 3.3.4

mozilla bugzilla 3.6.8

mozilla bugzilla 3.4.11

mozilla bugzilla 3.0.10

mozilla bugzilla 3.0.1

mozilla bugzilla 3.2.4

mozilla bugzilla 3.0.0

mozilla bugzilla 3.4.1

mozilla bugzilla 3.1.4

mozilla bugzilla 3.1.3

mozilla bugzilla 3.4.3

mozilla bugzilla 3.5.1

mozilla bugzilla

mozilla bugzilla 3.4.7

mozilla bugzilla 3.3.1

mozilla bugzilla 3.2.7

mozilla bugzilla 3.6.1

mozilla bugzilla 3.5.3

mozilla bugzilla 3.4.4

mozilla bugzilla 3.4.8

mozilla bugzilla 3.6.5

mozilla bugzilla 3.2.5

mozilla bugzilla 3.0.8

mozilla bugzilla 3.4

mozilla bugzilla 3.1.2

mozilla bugzilla 3.0.4

mozilla bugzilla 3.0.3

mozilla bugzilla 3.4.2

mozilla bugzilla 3.2.9

mozilla bugzilla 3.6.9

mozilla bugzilla 3.6.10

mozilla bugzilla 3.4.6

mozilla bugzilla 3.2.1

mozilla bugzilla 3.0.7

mozilla bugzilla 3.4.13

mozilla bugzilla 3.6.0

mozilla bugzilla 3.2.8

mozilla bugzilla 3.2.10

mozilla bugzilla 3.0.2

mozilla bugzilla 3.2.3

mozilla bugzilla 3.1.1

mozilla bugzilla 3.1.0

mozilla bugzilla 3.4.10

mozilla bugzilla 3.6.7

mozilla bugzilla 3.0.5

mozilla bugzilla 3.3.3

mozilla bugzilla 3.4.5

mozilla bugzilla 3.3.2

mozilla bugzilla 3.0.11

mozilla bugzilla 3.5.2

mozilla bugzilla 3.6.2

mozilla bugzilla 3.0.9

mozilla bugzilla 3.6.4

mozilla bugzilla 3.5

mozilla bugzilla 3.4.12

mozilla bugzilla 3.6.6

mozilla bugzilla 3.4.9

mozilla bugzilla 3.6.3

mozilla bugzilla 3.0.6

mozilla bugzilla 3.2.2

mozilla bugzilla 3.3

mozilla bugzilla 3.7

mozilla bugzilla 3.7.1

mozilla bugzilla 3.7.2

mozilla bugzilla 3.7.3

mozilla bugzilla 4.0

mozilla bugzilla 4.0.1

mozilla bugzilla 4.0.7

mozilla bugzilla 4.0.4

mozilla bugzilla 4.0.6

mozilla bugzilla 4.0.8

mozilla bugzilla 4.0.5

mozilla bugzilla 4.0.2

mozilla bugzilla 4.0.3

mozilla bugzilla 4.1

mozilla bugzilla 4.1.1

mozilla bugzilla 4.1.2

mozilla bugzilla 4.1.3

mozilla bugzilla 4.2.1

mozilla bugzilla 4.2.2

mozilla bugzilla 4.2

mozilla bugzilla 4.2.3

mozilla bugzilla 4.3.2

mozilla bugzilla 4.3.3

mozilla bugzilla 4.3

mozilla bugzilla 4.3.1