Bugzilla is prone to an information-disclosure vulnerability. Successful exploits will allow authenticated attackers to obtain potentially sensitive information that may aid in further attacks. The following are vulnerable: Bugzilla 3.3.4, 3.4rc1, and 3.4.

Updates are available. Please see the references for details.

• http://www.bugzilla.org
• http://www.bugzilla.org/security/3.4/
• http://www.securityfocus.com/bid/35916

---

Updated on 2015-03-25