CVE-2002-0806: Low severity Bugzilla vulnerability
Published Aug 12, 2002
·Updated
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows authenticated users with editing privileges to delete other users by directly calling the editusers.cgi script with the "del" option.
Affected Software
4 affected components
Bugzilla=2.16-rc1
Bugzilla=2.16
Bugzilla=2.14.1
Bugzilla=2.14
Remediation
Event History
Aug 12, 2002
CVE Published
04:00 AM
Apr 2, 2003
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What are the potential risks associated with CVE-2002-0806?
CVE-2002-0806 allows authenticated users with editing privileges to delete other users, which can lead to unauthorized account deletions and potential data loss.
2
How do I fix CVE-2002-0806?
To mitigate CVE-2002-0806, upgrade Bugzilla to version 2.14.2 or later, or 2.16rc2 or later.
3
Which versions of Bugzilla are affected by CVE-2002-0806?
Bugzilla versions 2.14 and 2.16 before 2.16rc2 are affected by CVE-2002-0806.
4
Who is vulnerable to CVE-2002-0806?
Any authenticated users with editing privileges on Bugzilla versions impacted by CVE-2002-0806 are vulnerable.
5
Is there a workaround for CVE-2002-0806 until I can upgrade?
There are no specific workarounds for CVE-2002-0806; the recommended action is to upgrade to a secure version.