Insecure URL Handling in Bugzilla before 2.14

CVE-2001-1403 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

Bugzilla before 2.14 includes the username and password in URLs, which could allow attackers to gain privileges by reading the information from the web server logs, or by "shoulder-surfing" and observing the web browser's location bar.

Learn more about our Web App Pen Testing.