launchpad private/security bug attachments publically accessible
Bug #298317 reported by
komputes
This bug report is a duplicate of:
Bug #39674: Attachments of private bugreports are public.
Edit
Remove
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Launchpad itself |
New
|
Undecided
|
Unassigned | ||
Bug Description
launchpadlibrarian attachments are in clear view and accessible by public/anyone who has the URL. Even when the bug is private/security vulnerability the user does not get control over which users get access to attachments.
To post a comment you must log in.
