CVEvulnerability
CVE-2001-1401
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2001-09-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Bugzilla before 2.14 does not properly restrict access to confidential bugs, which could allow Bugzilla users to bypass viewing permissions via modified bug id parameters in (1) process_bug.cgi, (2) show_activity.cgi, (3) showvotes.cgi, (4) showdependencytree.cgi, (5) showdependencygraph.cgi, (6) showattachment.cgi, or (7) describecomponents.cgi.
Affected configurations
• mozilla bugzilla 2.4
• mozilla bugzilla 2.6
• mozilla bugzilla 2.8
• mozilla bugzilla 2.10
• mozilla bugzilla 2.12
• mozilla bugzilla 2.14
References
- http://bugzilla.mozilla.org/show_bug.cgi?id=39524 bugzilla.mozilla.org
- http://bugzilla.mozilla.org/show_bug.cgi?id=39526 bugzilla.mozilla.org
- http://bugzilla.mozilla.org/show_bug.cgi?id=39527 bugzilla.mozilla.org
- http://bugzilla.mozilla.org/show_bug.cgi?id=39531 bugzilla.mozilla.org
- http://bugzilla.mozilla.org/show_bug.cgi?id=39533 bugzilla.mozilla.org
- http://bugzilla.mozilla.org/show_bug.cgi?id=70189 bugzilla.mozilla.org
- http://bugzilla.mozilla.org/show_bug.cgi?id=82781 bugzilla.mozilla.org
- http://marc.info/?l=bugtraq&m=99912899900567 marc.info
- http://www.redhat.com/support/errata/RHSA-2001-107.html Patch, Vendor Advisory
- http://bugzilla.mozilla.org/show_bug.cgi?id=39524 bugzilla.mozilla.org
- http://bugzilla.mozilla.org/show_bug.cgi?id=39526 bugzilla.mozilla.org
- http://bugzilla.mozilla.org/show_bug.cgi?id=39527 bugzilla.mozilla.org
- http://bugzilla.mozilla.org/show_bug.cgi?id=39531 bugzilla.mozilla.org
- http://bugzilla.mozilla.org/show_bug.cgi?id=39533 bugzilla.mozilla.org
- http://bugzilla.mozilla.org/show_bug.cgi?id=70189 bugzilla.mozilla.org
- http://bugzilla.mozilla.org/show_bug.cgi?id=82781 bugzilla.mozilla.org
- http://marc.info/?l=bugtraq&m=99912899900567 marc.info
- http://www.redhat.com/support/errata/RHSA-2001-107.html Patch, Vendor Advisory