Bugzilla 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 on Windows does not delete the temporary files associated with uploaded attachments, which allows local users to obtain sensitive information by reading these files.  NOTE: this issue exists because of a regression in 3.6.
                
            References
                    Configurations
                    Configuration 1 (hide)
| AND | 
            
            
 
  | 
    
History
                    No history.
Information
                Published : 2011-08-09 19:55
Updated : 2017-08-29 01:29
NVD link : CVE-2011-2977
Mitre link : CVE-2011-2977
CVE.ORG link : CVE-2011-2977
JSON object : View
Products Affected
                mozilla
- bugzilla
 
microsoft
- windows
 
CWE
                