Lucene search
MitreCVE-2001-1406HistoryApr 02, 2003 - 5:00 a.m.
CVE-2001-1406
2003-04-0205:00:00
mitre
web.nvd.nist.gov
33
cve-2001-1406
bugzilla
process_bug.cgi
groupset
product groups
restrictions
nvd
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.8
Confidence
High
EPSS
0.001
Percentile
20.0%
process_bug.cgi in Bugzilla before 2.14 does not set the “groupset” bit when a bug is moved between product groups, which will cause the bug to have the old group’s restrictions, which might not be as stringent.
Affected configurations
Node
mozillabugzillaMatch2.4
ORmozillabugzillaMatch2.6
ORmozillabugzillaMatch2.8
ORmozillabugzillaMatch2.10
ORmozillabugzillaMatch2.12
ORmozillabugzillaMatch2.14
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mozilla | bugzilla | 2.4 | cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:* |
| mozilla | bugzilla | 2.6 | cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:* |
| mozilla | bugzilla | 2.8 | cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:* |
| mozilla | bugzilla | 2.10 | cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:* |
| mozilla | bugzilla | 2.12 | cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:* |
| mozilla | bugzilla | 2.14 | cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:* |
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.8
Confidence
High
EPSS
0.001
Percentile
20.0%
Related for CVE-2001-1406