PT-2010-4270 · Mozilla · Bugzilla

Frédéric Buclin

·

Publicado

2010-08-13

·

Atualizado

2010-09-08

·

CVE-2010-2756

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Bugzilla versions 2.19.1 through 3.2.7 Bugzilla versions 3.3.1 through 3.4.7 Bugzilla versions 3.5.1 through 3.6.1 Bugzilla versions 3.7 through 3.7.2
Description The issue allows remote attackers to determine the group memberships of arbitrary users via vectors involving the Search interface, boolean charts, and group-based pronouns.
Recommendations For Bugzilla versions 2.19.1 through 3.2.7, update to a version outside of this range to resolve the issue. For Bugzilla versions 3.3.1 through 3.4.7, update to a version outside of this range to resolve the issue. For Bugzilla versions 3.5.1 through 3.6.1, update to a version outside of this range to resolve the issue. For Bugzilla versions 3.7 through 3.7.2, update to a version outside of this range to resolve the issue.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2010-2756

Produtos afetados

Bugzilla