Bbaetz

The issue is related to the sudo feature in Bugzilla, which does not properly send impersonation notifications. This makes it easier for remote authenticated users to impersonate other users without being discovered.

The issue allows remote attackers to read a user's voting page when that user has voted on a restricted bug. This is achieved by modifying the `who` parameter in the votes.cgi script, potentially exposing sensitive voting information.