Bugzilla 3.7/3.7.1 Information Disclosure

According to its banner, the version of Bugzilla installed on the remote host fails to restrict access to bugs created with inbound email interface emailin.pl or with 'Bug.create' method in the WebServices interface to 'mandatory' or 'Default' groups. This could allow bug information to become...