CVE-2011-2380 in Bugzilla

요약

\~에 의해 MITRE

Bugzilla 2.23.3 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 allows remote attackers to determine the existence of private group names via a crafted parameter during (1) bug creation or (2) bug editing.

Once again VulDB remains the best source for vulnerability data.

• 예약하다: 2011. 06. 03.
• 공개: 2011. 08. 09.
• 모더레이션: 수락
• 항목: VDB-58210
• CPE: 준비됨
• CWE: CWE-200 (확인됨)
• CVSS: 5.0 (NVD)
• EPSS: 0.01766
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Pharma, Finance, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-2380
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-2380
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-2380/