Hardware/Network
Mozilla Exposes 97000 Bugzilla User Passwords
Reported by esecurityplanet.com
Starting on or about May 4, 2014, database dump files containing users’ email addresses and encrypted passwords of about 97,000 users of Bugzilla software test builds were posted on a publicly accessible server.
The files were available for approximately three months.
“As soon we became aware, the database dump files were removed from the server immediately, and we’ve modified the testing process to not require database dumps,” announced Mark Cote, assistant project lead for Mozilla’s Bugzilla software.
.
