This host is running Bugzilla and is prone to information disclosure vulnerability.

Successful exploitation will allow attackers to read sensitive configuration fields. Impact Level: Application

upgrade Bugzilla 3.7.2 or later, For updates refer to http://www.bugzilla.org/download/

The flaw is due to an error in 'install/Filesystem.pm', which uses world-readable permissions within 'bzr/' and 'data/webdot/'.

Bugzilla version 3.5.1 to 3.6.1 and 3.7 through 3.7.1,

• http://www.bugzilla.org/status/changes.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=561797

---

Updated on 2015-03-25