Vulnerabilities > CVE-2001-1401 - Remote Security vulnerability in Bugzilla

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
mozilla
NVD
Published: 2001-09-10
Updated: 2016-10-18

Summary

Bugzilla before 2.14 does not properly restrict access to confidential bugs, which could allow Bugzilla users to bypass viewing permissions via modified bug id parameters in (1) process_bug.cgi, (2) show_activity.cgi, (3) showvotes.cgi, (4) showdependencytree.cgi, (5) showdependencygraph.cgi, (6) showattachment.cgi, or (7) describecomponents.cgi.

Vulnerable Configurations

Part Description Count
Application
Mozilla
6

Redhat

advisories
rhsa
idRHSA-2001:107

References