Beveiligingsadvies

CVE-2011-2979

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2011-08-09 19:00:00
Laatst bijgewerkt 2024-08-06 23:22:26
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Bugzilla 4.1.x before 4.1.3 generates different responses for certain assignee queries depending on whether the group name is valid, which allows remote attackers to determine the existence of private group names via a custom search. NOTE: this vulnerability exists because of a CVE-2010-2756 regression.