CVE

Id
4204  
CVE No.
CVE-2001-1401  
Status
Candidate  
Description
Bugzilla before 2.14 does not properly restrict access to confidential bugs, which could allow Bugzilla users to bypass viewing permissions via modified bug id parameters in (1) process_bug.cgi, (2) show_activity.cgi, (3) showvotes.cgi, (4) showdependencytree.cgi, (5) showdependencygraph.cgi, (6) showattachment.cgi, or (7) describecomponents.cgi.  
Phase
Proposed (20020830)  
Votes
ACCEPT(6) Armstrong, Baker, Cole, Cox, Green, Wall | MODIFY(1) Frech | NOOP(1) Foat  
Comments
Frech> XF:bugzilla-describe-components(7058) | XF:bugzilla-show-dependency-graph(7060) | XF:bugzilla-show-dependency-tree(7061) | XF:bugzilla-show-votes(7065) | XF:bugzilla-show-activity(7066) | XF:bugzilla-process-bug(7067) | XF:bugzilla-show-attachment(7070)  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
19961 4204 CVE-2001-1401 BUGTRAQ:20010829 Security Advisory for Bugzilla v2.13 and older  View
19962 4204 CVE-2001-1401 URL:http://marc.info/?l=bugtraq&m=99912899900567  View
19963 4204 CVE-2001-1401 CONFIRM:http://bugzilla.mozilla.org/show_bug.cgi?id=82781  View
19964 4204 CVE-2001-1401 CONFIRM:http://bugzilla.mozilla.org/show_bug.cgi?id=39531  View
19965 4204 CVE-2001-1401 CONFIRM:http://bugzilla.mozilla.org/show_bug.cgi?id=39524  View
19966 4204 CVE-2001-1401 CONFIRM:http://bugzilla.mozilla.org/show_bug.cgi?id=39533  View
19967 4204 CVE-2001-1401 REDHAT:RHSA-2001:107  View
19968 4204 CVE-2001-1401 URL:http://www.redhat.com/support/errata/RHSA-2001-107.html  View
19969 4204 CVE-2001-1401 CONFIRM:http://bugzilla.mozilla.org/show_bug.cgi?id=39526  View
19970 4204 CVE-2001-1401 CONFIRM:http://bugzilla.mozilla.org/show_bug.cgi?id=39527  View

Related JVN