VULNERABILITY INTELLIGENCE

CVE-2005-3139

CVSS score5 MEDIUM
EPSS probability0.97%
CISA KEVNot currently listed
Published2005-10-05
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Bugzilla 2.19.1 through 2.20rc2 and 2.21, with user matching turned on in substring mode, allows attackers to list all users whose names match an arbitrary substring, even when the usevisibilitygroups parameter is set.

Primary references