describecomponents.cgi in Bugzilla 2.17.3 and 2.17.4 does not properly verify group membership when bug entry groups are used, which allows remote attackers to list component descriptions for otherwise restricted products.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2004-08-17 21:00
Updated : 2017-07-10 18:29
NVD link : CVE-2003-1046
Mitre link : CVE-2003-1046
JSON object : View
CWE
Products Affected
mozilla
- bugzilla