Lucene search

K
ubuntucveUbuntu.comUB:CVE-2005-1564
HistoryMay 12, 2005 - 12:00 a.m.

CVE-2005-1564

2005-05-1200:00:00
ubuntu.com
ubuntu.com
8

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.007

Percentile

79.6%

post_bug.cgi in Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 allows
remote authenticated users to “enter bugs into products that are closed for
bug entry” by modifying the URL to specify the name of the product.

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.007

Percentile

79.6%

Related for UB:CVE-2005-1564