CVE-2001-1407

High

7.5/10

Summary

Bugzilla before 2.14 allows Bugzilla users to bypass group security checks by marking a bug as the duplicate of a restricted bug, which adds the user to the CC list of the restricted bug and allows the user to view the bug.

Access Complexity: LOW
AccessVector: NETWORK
Authentication: NONE
Integrity Impact: PARTIAL
Confidentiality Impact: PARTIAL
Availability Impact: PARTIAL

References

Advisory Timeline

Published Sep 10, 2001

CVE-2001-1407

Summary

References

Advisory Timeline

ChainJacking

JetBrains IDE

KICS SaaS