Design/Logic Flaw

2012-11-1612:24:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

43.9%

JSON

The User.get method in Bugzilla/WebService/User.pm in Bugzilla 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1 has a different outcome for a groups request depending on whether a group exists, which allows remote authenticated users to discover private group names by observing whether a call throws an error.

CPENameOperatorVersion
bugzillaeq3.7.2
bugzillaeq3.7.1
bugzillaeq3.7
bugzillaeq3.7.3
bugzillaeq4.0.1
bugzillaeq4.0 rc2
bugzillaeq4.0.2
bugzillaeq4.0.5
bugzillaeq4.0.7
bugzillaeq4.0.8

Name	Operator	Version
bugzilla	eq	3.7.2
bugzilla	eq	3.7.1
bugzilla	eq	3.7
bugzilla	eq	3.7.3
bugzilla	eq	4.0.1
bugzilla	eq	4.0 rc2
bugzilla	eq	4.0.2
bugzilla	eq	4.0.5
bugzilla	eq	4.0.7
bugzilla	eq	4.0.8