Bugzilla Multiple Information Disclosure Vulnerabilities

Bugtraq ID:	54708
Class:	Access Validation Error
CVE:	CVE-2012-1968 CVE-2012-1969
Remote:	Yes
Local:	No
Published:	Jul 27 2012 12:00AM
Updated:	May 07 2015 05:03PM
Credit:	Frédéric Buclin and Byron Jones
Vulnerable:	Mozilla Bugzilla 4.1.3 Mozilla Bugzilla 4.1.1 Mozilla Bugzilla 4.0.5 Mozilla Bugzilla 4.0.4 Mozilla Bugzilla 4.0.3 Mozilla Bugzilla 4.0.2 Mozilla Bugzilla 3.6.8 Mozilla Bugzilla 3.6.7 Mozilla Bugzilla 3.6.6 Mozilla Bugzilla 3.6.4 Mozilla Bugzilla 3.6.1 Mozilla Bugzilla 4.2rc2 Mozilla Bugzilla 4.2rc1 Mozilla Bugzilla 4.2 Mozilla Bugzilla 4.1 Mozilla Bugzilla 3.6.3 Mozilla Bugzilla 3.6.2 Mozilla Bugzilla 3.6 Mandriva Business Server 1 X86 64 Mandriva Business Server 1
Not Vulnerable:	Mozilla Bugzilla 4.3.1 Mozilla Bugzilla 4.2.1 Mozilla Bugzilla 4.0.6 Mozilla Bugzilla 3.6.9

Bugzilla Multiple Information Disclosure Vulnerabilities

Solution:
Vendor updates are available. Please see the references for more information.