Security Advisory

CVE-2002-0008

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2002-01-10 05:00:00

Last updated 2024-08-08 02:35:16

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Bugzilla before 2.14.1 allows remote attackers to (1) spoof a user comment via an HTTP request to process_bug.cgi using the "who" parameter, instead of the Bugzilla_login cookie, or (2) post a bug as another user by modifying the reporter parameter to enter_bug.cgi, which is passed to post_bug.cgi.

← Browse all CVEs View on cve.org ↗