CVE-2005-3139

published 2005-10-05

CVE-2005-3139: Bugzilla 2.19.1 through 2.20rc2 and 2.21, with user matching turned on in substring mode, allows attackers to list all users whose names match an arbitrary…

medium 5 CVSS 3.1

AV N AC L Au N C P I N A N

Bugzilla 2.19.1 through 2.20rc2 and 2.21, with user matching turned on in substring mode, allows attackers to list all users whose names match an arbitrary substring, even when the usevisibilitygroups parameter is set.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
mozilla	bugzilla	—	—
mozilla	bugzilla	—	—
mozilla	bugzilla	—	—
mozilla	bugzilla	—	—
mozilla	bugzilla	—	—