CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
77.8%
describecomponents.cgi in Bugzilla 2.17.3 and 2.17.4 does not properly verify group membership when bug entry groups are used, which allows remote attackers to list component descriptions for otherwise restricted products.
Vendor | Product | Version | CPE |
---|---|---|---|
mozilla | bugzilla | 2.4 | cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:* |
mozilla | bugzilla | 2.6 | cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:* |
mozilla | bugzilla | 2.8 | cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:* |
mozilla | bugzilla | 2.10 | cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:* |
mozilla | bugzilla | 2.12 | cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:* |
mozilla | bugzilla | 2.14 | cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:* |
mozilla | bugzilla | 2.14.1 | cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:* |
mozilla | bugzilla | 2.14.2 | cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:* |
mozilla | bugzilla | 2.14.3 | cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:* |
mozilla | bugzilla | 2.14.4 | cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:* |