SecuritySpace - CVE-2012-4199

Vulnerability Search		Search 324607 CVE descriptions and 146377 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2012-4199

Description: template/en/default/bug/field-events.js.tmpl in Bugzilla 3.x before 3.6.12, 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1 generates JavaScript function calls containing private product names or private component names in certain circumstances involving custom-field visibility control, which allows remote attackers to obtain sensitive information by reading HTML source code.

Test IDs: 1.3.6.1.4.1.25623.1.0.72601

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2012-4199
http://www.mandriva.com/security/advisories?name=MDVSA-2013:066
XForce ISS Database: bugzilla-custom-fields-info-disclosure(80029)
https://exchange.xforce.ibmcloud.com/vulnerabilities/80029

CVE ID:	CVE-2012-4199
Description:	template/en/default/bug/field-events.js.tmpl in Bugzilla 3.x before 3.6.12, 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1 generates JavaScript function calls containing private product names or private component names in certain circumstances involving custom-field visibility control, which allows remote attackers to obtain sensitive information by reading HTML source code.
Test IDs:	1.3.6.1.4.1.25623.1.0.72601
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2012-4199 http://www.mandriva.com/security/advisories?name=MDVSA-2013:066 XForce ISS Database: bugzilla-custom-fields-info-disclosure(80029) https://exchange.xforce.ibmcloud.com/vulnerabilities/80029