NVD

Id
14200  
Name
CVE-2010-2757  
Description
The sudo feature in Bugzilla 2.22rc1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 does not properly send impersonation notifications, which makes it easier for remote authenticated users to impersonate other users without discovery.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-08-16  
Modified Date
2010-09-08  
Seq
2010-2757  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
78446 14200 CVE-2010-2757 FEDORA-2010-13171  View
78447 14200 CVE-2010-2757 FEDORA-2010-13072  View
78448 14200 CVE-2010-2757 FEDORA-2010-13086  View
78449 14200 CVE-2010-2757 http://www.bugzilla.org/security/3.2.7/  View
78450 14200 CVE-2010-2757 42275  View
78451 14200 CVE-2010-2757 ADV-2010-2035  View
78452 14200 CVE-2010-2757 ADV-2010-2205  View
78453 14200 CVE-2010-2757 https://bugzilla.mozilla.org/show_bug.cgi?id=450013  View
78454 14200 CVE-2010-2757 https://bugzilla.redhat.com/show_bug.cgi?id=623423  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39174 JVNDB-2010-004959 Bugzilla の sudo 機能における他のユーザになりすまされる脆弱性 Bugzilla の sudo 機能は、偽装通知を適切に送信しないため、検出されずに他のユーザになりすまされる脆弱性が存在します。 CVE-2010-2757 45337 CVE-2010-2757 14200 6.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004959.html 2010-08-05 2012-09-25 View