CVE-2012-4199
Summary
| CVE | CVE-2012-4199 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2012-11-16 12:24:24 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | template/en/default/bug/field-events.js.tmpl in Bugzilla 3.x before 3.6.12, 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1 generates JavaScript function calls containing private product names or private component names in certain circumstances involving custom-field visibility control, which allows remote attackers to obtain sensitive information by reading HTML source code. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
PartialIntegrity
NoneAvailability
NoneAV:N/AC:M/Au:N/C:P/I:N/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Mozilla | Bugzilla | 3.0 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0 | rc1 | All | All |
| Application | Mozilla | Bugzilla | 3.0.0 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.1 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.10 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.11 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.2 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.3 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.4 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.5 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.6 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.7 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.8 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.9 | All | All | All |
| Application | Mozilla | Bugzilla | 3.1.0 | All | All | All |
| Application | Mozilla | Bugzilla | 3.1.1 | All | All | All |
| Application | Mozilla | Bugzilla | 3.1.2 | All | All | All |
| Application | Mozilla | Bugzilla | 3.1.3 | All | All | All |
| Application | Mozilla | Bugzilla | 3.1.4 | All | All | All |
| Application | Mozilla | Bugzilla | 3.2 | All | All | All |
| Application | Mozilla | Bugzilla | 3.2 | rc1 | All | All |
| Application | Mozilla | Bugzilla | 3.2 | rc2 | All | All |
| Application | Mozilla | Bugzilla | 3.2.1 | All | All | All |
| Application | Mozilla | Bugzilla | 3.2.10 | All | All | All |
| Application | Mozilla | Bugzilla | 3.2.2 | All | All | All |
| Application | Mozilla | Bugzilla | 3.2.3 | All | All | All |
| Application | Mozilla | Bugzilla | 3.2.4 | All | All | All |
| Application | Mozilla | Bugzilla | 3.2.5 | All | All | All |
| Application | Mozilla | Bugzilla | 3.2.6 | All | All | All |
| Application | Mozilla | Bugzilla | 3.2.7 | All | All | All |
| Application | Mozilla | Bugzilla | 3.2.8 | All | All | All |
| Application | Mozilla | Bugzilla | 3.2.9 | All | All | All |
| Application | Mozilla | Bugzilla | 3.3 | All | All | All |
| Application | Mozilla | Bugzilla | 3.3.1 | All | All | All |
| Application | Mozilla | Bugzilla | 3.3.2 | All | All | All |
| Application | Mozilla | Bugzilla | 3.3.3 | All | All | All |
| Application | Mozilla | Bugzilla | 3.3.4 | All | All | All |
| Application | Mozilla | Bugzilla | 3.4 | All | All | All |
| Application | Mozilla | Bugzilla | 3.4 | rc1 | All | All |
| Application | Mozilla | Bugzilla | 3.4.1 | All | All | All |
| Application | Mozilla | Bugzilla | 3.4.10 | All | All | All |
| Application | Mozilla | Bugzilla | 3.4.11 | All | All | All |
| Application | Mozilla | Bugzilla | 3.4.12 | All | All | All |
| Application | Mozilla | Bugzilla | 3.4.13 | All | All | All |
| Application | Mozilla | Bugzilla | 3.4.2 | All | All | All |
| Application | Mozilla | Bugzilla | 3.4.3 | All | All | All |
| Application | Mozilla | Bugzilla | 3.4.4 | All | All | All |
| Application | Mozilla | Bugzilla | 3.4.5 | All | All | All |
| Application | Mozilla | Bugzilla | 3.4.6 | All | All | All |
| Application | Mozilla | Bugzilla | 3.4.7 | All | All | All |
| Application | Mozilla | Bugzilla | 3.4.8 | All | All | All |
| Application | Mozilla | Bugzilla | 3.4.9 | All | All | All |
| Application | Mozilla | Bugzilla | 3.5 | All | All | All |
| Application | Mozilla | Bugzilla | 3.5.1 | All | All | All |
| Application | Mozilla | Bugzilla | 3.5.2 | All | All | All |
| Application | Mozilla | Bugzilla | 3.5.3 | All | All | All |
| Application | Mozilla | Bugzilla | 3.6 | All | All | All |
| Application | Mozilla | Bugzilla | 3.6 | rc1 | All | All |
| Application | Mozilla | Bugzilla | 3.6.0 | All | All | All |
| Application | Mozilla | Bugzilla | 3.6.1 | All | All | All |
| Application | Mozilla | Bugzilla | 3.6.10 | All | All | All |
| Application | Mozilla | Bugzilla | 3.6.2 | All | All | All |
| Application | Mozilla | Bugzilla | 3.6.3 | All | All | All |
| Application | Mozilla | Bugzilla | 3.6.4 | All | All | All |
| Application | Mozilla | Bugzilla | 3.6.5 | All | All | All |
| Application | Mozilla | Bugzilla | 3.6.6 | All | All | All |
| Application | Mozilla | Bugzilla | 3.6.7 | All | All | All |
| Application | Mozilla | Bugzilla | 3.6.8 | All | All | All |
| Application | Mozilla | Bugzilla | 3.6.9 | All | All | All |
| Application | Mozilla | Bugzilla | 3.7 | All | All | All |
| Application | Mozilla | Bugzilla | 3.7.1 | All | All | All |
| Application | Mozilla | Bugzilla | 3.7.2 | All | All | All |
| Application | Mozilla | Bugzilla | 3.7.3 | All | All | All |
| Application | Mozilla | Bugzilla | 4.0 | All | All | All |
| Application | Mozilla | Bugzilla | 4.0 | rc1 | All | All |
| Application | Mozilla | Bugzilla | 4.0 | rc2 | All | All |
| Application | Mozilla | Bugzilla | 4.0.1 | All | All | All |
| Application | Mozilla | Bugzilla | 4.0.2 | All | All | All |
| Application | Mozilla | Bugzilla | 4.0.3 | All | All | All |
| Application | Mozilla | Bugzilla | 4.0.4 | All | All | All |
| Application | Mozilla | Bugzilla | 4.0.5 | All | All | All |
| Application | Mozilla | Bugzilla | 4.0.6 | All | All | All |
| Application | Mozilla | Bugzilla | 4.0.7 | All | All | All |
| Application | Mozilla | Bugzilla | 4.0.8 | All | All | All |
| Application | Mozilla | Bugzilla | 4.1 | All | All | All |
| Application | Mozilla | Bugzilla | 4.1.1 | All | All | All |
| Application | Mozilla | Bugzilla | 4.1.2 | All | All | All |
| Application | Mozilla | Bugzilla | 4.1.3 | All | All | All |
| Application | Mozilla | Bugzilla | 4.2 | All | All | All |
| Application | Mozilla | Bugzilla | 4.2 | rc1 | All | All |
| Application | Mozilla | Bugzilla | 4.2 | rc2 | All | All |
| Application | Mozilla | Bugzilla | 4.2.1 | All | All | All |
| Application | Mozilla | Bugzilla | 4.2.2 | All | All | All |
| Application | Mozilla | Bugzilla | 4.2.3 | All | All | All |
| Application | Mozilla | Bugzilla | 4.3 | All | All | All |
| Application | Mozilla | Bugzilla | 4.3.1 | All | All | All |
| Application | Mozilla | Bugzilla | 4.3.2 | All | All | All |
| Application | Mozilla | Bugzilla | 4.3.3 | All | All | All |
| Application | Mozilla | Bugzilla | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| 731178 – (CVE-2012-4199) [SECURITY] field-events.js.tmpl discloses product and component names that the user is not allowed to see | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.mozilla.org | |
| 4.3.3, 4.2.3, 4.0.8, and 3.6.11 Security Advisory :: Bugzilla :: bugzilla.org | af854a3a-2127-422b-91ae-364da2661108 | www.bugzilla.org | Vendor Advisory |
| Support / Security / Advisories / / MDVSA-2013:066 | Mandriva | af854a3a-2127-422b-91ae-364da2661108 | www.mandriva.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.