Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The default .htaccess scripts for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 do not include filenames for backup copies of the localconfig file that are made from editors such as vi and Emacs, which could allow remote attackers to obtain a database password by directly accessing the backup file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Bugzilla LocalConfig配置文件远程泄露漏洞
Vulnerability Description
Bugzilla是美国Mozilla基金会开发的一套开源的缺陷跟踪系统，它可管理软件开发中缺陷的提交（new）、修复（resolve）、关闭（close）等整个生命周期。 Bugzilla中默认.htaccess脚本没有正确防止用户对localconfig备份文件的访问，远程攻击者可以利用这个漏洞获得敏感信息，包括数据库密码。 由checksetup.pl提供的.htaccess脚本，没有正确防止远程攻击者对localconfig备份文件的访问，如果用户使用了vi或者emacs编辑localconfig文
CVSS Information
N/A
Vulnerability Type
N/A