CVEvulnerability
CVE-2010-2756
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-08-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
Search.pm in Bugzilla 2.19.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 allows remote attackers to determine the group memberships of arbitrary users via vectors involving the Search interface, boolean charts, and group-based pronouns.
Affected configurations
• mozilla bugzilla 2.2
• mozilla bugzilla 2.4
• mozilla bugzilla 2.6
• mozilla bugzilla 2.8
• mozilla bugzilla 2.9
• mozilla bugzilla 2.19.1
• mozilla bugzilla 2.19.2
• mozilla bugzilla 2.19.3
• mozilla bugzilla 2.20
• mozilla bugzilla 2.20.1
• mozilla bugzilla 2.20.2
• mozilla bugzilla 2.20.3
• mozilla bugzilla 2.20.4
• mozilla bugzilla 2.20.5
• mozilla bugzilla 2.20.6
• mozilla bugzilla 2.20.7
• mozilla bugzilla 2.21
• mozilla bugzilla 2.21.1
• mozilla bugzilla 2.21.2
• mozilla bugzilla 2.22
• mozilla bugzilla 2.22.1
• mozilla bugzilla 2.22.3
• mozilla bugzilla 2.22.4
• mozilla bugzilla 2.22.5
• mozilla bugzilla 2.22.6
• mozilla bugzilla 2.22.7
• mozilla bugzilla 2.23
• mozilla bugzilla 2.23.1
• mozilla bugzilla 2.23.2
• mozilla bugzilla 2.23.3
• mozilla bugzilla 2.23.4
• mozilla bugzilla 3.0
• mozilla bugzilla 3.0.0
• mozilla bugzilla 3.0.1
• mozilla bugzilla 3.0.2
• mozilla bugzilla 3.0.3
• mozilla bugzilla 3.0.4
• mozilla bugzilla 3.0.5
• mozilla bugzilla 3.0.6
• mozilla bugzilla 3.0.7
• mozilla bugzilla 3.0.8
• mozilla bugzilla 3.0.9
• mozilla bugzilla 3.0.10
• mozilla bugzilla 3.0.11
• mozilla bugzilla 3.1.0
• mozilla bugzilla 3.1.1
• mozilla bugzilla 3.1.2
• mozilla bugzilla 3.1.3
• mozilla bugzilla 3.2
• mozilla bugzilla 3.2.2
• mozilla bugzilla 3.2.3
• mozilla bugzilla 3.2.4
• mozilla bugzilla 3.2.5
• mozilla bugzilla 3.2.6
• mozilla bugzilla 3.2.7
• mozilla bugzilla 3.3.1
• mozilla bugzilla 3.3.2
• mozilla bugzilla 3.3.3
• mozilla bugzilla 3.3.4
• mozilla bugzilla 3.4.1
… and 14 more
Related
Weakness · not in database (1)
References
- http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046518.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046534.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046546.html lists.fedoraproject.org
- http://secunia.com/advisories/40892 Vendor Advisory
- http://secunia.com/advisories/41128 secunia.com
- http://www.bugzilla.org/security/3.2.7/ www.bugzilla.org
- http://www.securityfocus.com/bid/42275 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/2035 www.vupen.com
- http://www.vupen.com/english/advisories/2010/2205 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=417048 bugzilla.mozilla.org
- https://bugzilla.redhat.com/show_bug.cgi?id=623423 bugzilla.redhat.com
- http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046518.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046534.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046546.html lists.fedoraproject.org
- http://secunia.com/advisories/40892 Vendor Advisory
- http://secunia.com/advisories/41128 secunia.com
- http://www.bugzilla.org/security/3.2.7/ www.bugzilla.org
- http://www.securityfocus.com/bid/42275 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/2035 www.vupen.com
- http://www.vupen.com/english/advisories/2010/2205 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=417048 bugzilla.mozilla.org
- https://bugzilla.redhat.com/show_bug.cgi?id=623423 bugzilla.redhat.com