MEDIUM
bugzilla hidden bug alias disclosure
Published Nov 20, 2009
5.0
MEDIUMCVSS 2.0
EPSS 1.73%
Description
Template.pm in Bugzilla 3.3.2 through 3.4.3 and 3.5 through 3.5.1 allows remote attackers to discover the alias of a private bug by reading the (1) Depends On or (2) Blocks field of a related bug.
Affected products
No data.
OR
- 3.3.2
- 3.3.3
- 3.3.4
- 3.4
- 3.4
- 3.4.1
- 3.4.2
- 3.4.3
- 3.5
- 3.5.1
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (11)
- http://osvdb.org/60271 vdb-entryx_refsource_OSVDB
- http://secunia.com/advisories/37423 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://www.bugzilla.org/security/3.4.3/ x_refsource_CONFIRMPatchVendor Advisory
- http://www.securityfocus.com/bid/37062 vdb-entryx_refsource_BIDPatch
- http://www.vupen.com/english/advisories/2009/3288 vdb-entryx_refsource_VUPENPatchVendor Advisory
- https://access.redhat.com/security/cve/CVE-2009-3386 Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=529416 x_refsource_CONFIRMPatch
- https://bugzilla.redhat.com/show_bug.cgi?id=539598 Issue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54332 vdb-entryx_refsource_XF
- https://nvd.nist.gov/vuln/detail/CVE-2009-3386
- https://www.cve.org/CVERecord?id=CVE-2009-3386
| Link | Providers | Tags |
|---|---|---|
| http://osvdb.org/60271 | vdb-entryx_refsource_OSVDB | |
| http://secunia.com/advisories/37423 | third-party-advisoryx_refsource_SECUNIAVendor Advisory | |
| http://www.bugzilla.org/security/3.4.3/ | x_refsource_CONFIRMPatchVendor Advisory | |
| http://www.securityfocus.com/bid/37062 | vdb-entryx_refsource_BIDPatch | |
| http://www.vupen.com/english/advisories/2009/3288 | vdb-entryx_refsource_VUPENPatchVendor Advisory | |
| https://access.redhat.com/security/cve/CVE-2009-3386 | Vendor Advisory | |
| https://bugzilla.mozilla.org/show_bug.cgi?id=529416 | x_refsource_CONFIRMPatch | |
| https://bugzilla.redhat.com/show_bug.cgi?id=539598 | Issue Tracking | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/54332 | vdb-entryx_refsource_XF | |
| https://nvd.nist.gov/vuln/detail/CVE-2009-3386 | ||
| https://www.cve.org/CVERecord?id=CVE-2009-3386 |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Nov 20, 2009
Updated Aug 7, 2024
Reserved Sep 24, 2009
Link CVE-2009-3386
CISA Vulnrichment
Updated n/a