system
Describe <CVE-2001-1403>.
user
What is <CVE-2001-1403>?
assistant
Bugzilla before 2.14 includes the username and password in URLs, which could allow attackers to gain privileges by reading the information from the web server logs, or by "shoulder-surfing" and observing the web browser's location bar..