CVE-2001-1403 — Mozilla Bugzilla vulnerability
5 documents5 sources
Severity
7.5HIGHNVD
EPSS
0.5%
top 32.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedSep 10
Latest updateApr 30
Description
Bugzilla before 2.14 includes the username and password in URLs, which could allow attackers to gain privileges by reading the information from the web server logs, or by "shoulder-surfing" and observing the web browser's location bar.
CVSS vector
AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4