Beveiligingsadvies

CVE-2001-1401

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2002-08-31 04:00:00

Laatst bijgewerkt 2024-08-08 04:51:08

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Bugzilla before 2.14 does not properly restrict access to confidential bugs, which could allow Bugzilla users to bypass viewing permissions via modified bug id parameters in (1) process_bug.cgi, (2) show_activity.cgi, (3) showvotes.cgi, (4) showdependencytree.cgi, (5) showdependencygraph.cgi, (6) showattachment.cgi, or (7) describecomponents.cgi.

← Alle CVE's bekijken Bekijk op cve.org ↗