First published: Thu Jan 31 2002(Updated: )
Information leak in doeditvotes.cgi in Bugzilla before 2.14.1 may allow remote attackers to more easily conduct attacks on the login.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mozilla Bugzilla | <=2.14.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-0011 is considered a moderate severity vulnerability due to its potential to facilitate unauthorized access attempts.
To fix CVE-2002-0011, upgrade Bugzilla to version 2.14.1 or later.
CVE-2002-0011 affects Bugzilla versions prior to 2.14.1.
The impact of CVE-2002-0011 is the possibility of information leakage that may assist attackers in guessing login credentials.
CVE-2002-0011 can be exploited by remote attackers who have access to the vulnerable Bugzilla installation.