PT-2010-4271
CVE-2010-2757
·
تاريخ النشر
2010-08-13
·
تاريخ التحديث
2010-09-08
الوصف من
CVSS 2.0
6.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Bugzilla versions 2.22rc1 through 3.2.7
Bugzilla versions 3.3.1 through 3.4.7
Bugzilla versions 3.5.1 through 3.6.1
Bugzilla versions 3.7 through 3.7.2
Description
The issue is related to the sudo feature in Bugzilla, which does not properly send impersonation notifications. This makes it easier for remote authenticated users to impersonate other users without being discovered.
Recommendations
For versions 2.22rc1 through 3.2.7, update to a version outside of this range to resolve the issue.
For versions 3.3.1 through 3.4.7, update to a version outside of this range to resolve the issue.
For versions 3.5.1 through 3.6.1, update to a version outside of this range to resolve the issue.
For versions 3.7 through 3.7.2, update to a version outside of this range to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾