NVD

Id
2038  
Name
CVE-2008-2104  
Description
The WebService in Bugzilla 3.1.3 allows remote authenticated users without canconfirm privileges to create NEW or ASSIGNED bug entries via a request to the XML-RPC interface, which bypasses the canconfirm check.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-05-07  
Modified Date
2011-03-07  
Seq
2008-2104  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
13090 2038 CVE-2008-2104 http://www.bugzilla.org/security/2.20.5/  View
13091 2038 CVE-2008-2104 29038  View
13092 2038 CVE-2008-2104 1019968  View
13093 2038 CVE-2008-2104 ADV-2008-1428  View
13094 2038 CVE-2008-2104 bugzilla-xmlrpc-security-bypass(42218)  View
13095 2038 CVE-2008-2104 https://bugzilla.mozilla.org/show_bug.cgi?id=415471  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49093 JVNDB-2008-004403 Bugzilla の WebService における NEW などのバグエントリを作成される脆弱性 Bugzilla の WebService には、NEW または ASSIGNED のバグエントリを作成される脆弱性が存在します。 CVE-2008-2104 32217 CVE-2008-2104 2038 4 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004403.html 2008-05-04 2012-09-25 View