CVE-2012-5884

Bugzilla 4.3.2 - Exposure of Sensitive Information via User.get Method

Title source: llm
STIX 2.1

Description

The User.get method in Bugzilla/WebService/User.pm in Bugzilla 4.3.2 allows remote attackers to obtain sensitive information about the saved searches of arbitrary users via an XMLRPC request or a JSONRPC request, a different vulnerability than CVE-2012-4198.

References (3)

Core 3
Core References
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=781850
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=697224
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/80115

Scores

EPSS 0.0117
EPSS Percentile 63.6%

Details

CWE
CWE-200
Status published
Products (1)
mozilla/bugzilla 4.3.2
Published Nov 16, 2012
Tracked Since Feb 18, 2026