CVE-2003-1046
N/A
N/A
Summary
describecomponents.cgi in Bugzilla 2.17.3 and 2.17.4 does not properly verify group membership when bug entry groups are used, which allows remote attackers to list component descriptions for otherwise restricted products.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://www.securityfocus.com/archive/1/343185
- http://bugzilla.mozilla.org/show_bug.cgi?id=209742
- http://www.securityfocus.com/bid/8953
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13602
References
- http://www.securityfocus.com/archive/1/343185
- http://bugzilla.mozilla.org/show_bug.cgi?id=209742
- http://www.securityfocus.com/bid/8953
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13602
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.