describecomponents.cgi in Bugzilla 2.17.3 and 2.17.4 does not properly verify group membership when bug entry groups are used, which allows remote attackers to list component descriptions for otherwise restricted products.
References
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:46
Type | Values Removed | Values Added |
---|---|---|
References | () http://bugzilla.mozilla.org/show_bug.cgi?id=209742 - | |
References | () http://www.securityfocus.com/archive/1/343185 - | |
References | () http://www.securityfocus.com/bid/8953 - Patch, Vendor Advisory | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/13602 - |
Information
Published : 2004-08-18 04:00
Updated : 2024-11-20 23:46
NVD link : CVE-2003-1046
Mitre link : CVE-2003-1046
CVE.ORG link : CVE-2003-1046
JSON object : View
Products Affected
mozilla
- bugzilla
CWE