Vulnerability in Mozilla Bugzilla

CVE-2004-0702

DBI in Bugzilla 2.17.1 through 2.17.7 displays the database password in an error message when the SQL server is not running, which could allow remote attackers to gain sensitive information.

EPSS: 0.012 (64.9th percentile) — read the EPSS interpretation.

Affected products

Mozilla Bugzilla — versions 2.4, 2.6, 2.8
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)