Lucene search
HistoryApr 02, 2003 - 5:00 a.m.
CVE-2002-0808
bugzilla
cve-2002-0808
security
groupset permissions
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.1%
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when performing a mass change, sets the groupset of all bugs to the groupset of the first bug, which could inadvertently cause insecure groupset permissions to be assigned to some bugs.
Affected configurations
Node
mozillabugzillaMatch2.14
ORmozillabugzillaMatch2.14.1
ORmozillabugzillaMatch2.16
ORmozillabugzillaMatch2.16rc1
| CPE | Name | Operator | Version |
|---|---|---|---|
| mozilla:bugzilla | mozilla bugzilla | eq | 2.14 |
| mozilla:bugzilla | mozilla bugzilla | eq | 2.14.1 |
| mozilla:bugzilla | mozilla bugzilla | eq | 2.16 |
Related
cvelist
cvelist
CVE-2002-0808
2003-04-02 05:00:00
nvd
nvd
CVE-2002-0808
2002-08-12 04:00:00
nessus
nessus
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.1%
Related for CVE-2002-0808