FreeBSD : bugzilla -- product name information leak (d67b517d-8214-11de-88ea-001a4d49522b)
High Nessus Plugin ID 40496
SynopsisThe remote FreeBSD host is missing a security-related update.
DescriptionA Bugzilla Security Advisory reports :
Normally, users are only supposed to see products that they can file bugs against in the 'Product' drop-down on the bug-editing page.
Instead, users were being shown all products, even those that they normally could not see. Any user who could edit any bug could see all product names.
SolutionUpdate the affected package.