Security Advisory

CVE-2003-1046

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2004-06-03 04:00:00

Last updated 2024-08-08 02:12:35

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

describecomponents.cgi in Bugzilla 2.17.3 and 2.17.4 does not properly verify group membership when bug entry groups are used, which allows remote attackers to list component descriptions for otherwise restricted products.

← Browse all CVEs View on cve.org ↗