CVE-2014-1571 Bugzilla 2.x through 4.0.x before 4.0.15, 4.1.x and 4.2.x before 4.2.11, 4.3.x and 4.4.x before 4.4.6, and 4.5.x before 4.5.6 allows remote authenticated users to obtain sensitive private-comment info...
MediumCVSS 4.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Bugzilla 2.x through 4.0.x before 4.0.15, 4.1.x and 4.2.x before 4.2.11, 4.3.x and 4.4.x before 4.4.6, and 4.5.x before 4.5.6 allows remote authenticated users to obtain sensitive private-comment information by leveraging a role as a flag recipient, related to Bug.pm, Flag.pm, and a mail template.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla bugzilla | = 2.0 | No fix listed |
| mozilla bugzilla | = 2.2 | No fix listed |
| mozilla bugzilla | = 2.4 | No fix listed |
| mozilla bugzilla | = 2.6 | No fix listed |
| mozilla bugzilla | = 2.8 | No fix listed |
| mozilla bugzilla | = 2.9 | No fix listed |
| mozilla bugzilla | = 2.10 | No fix listed |
| mozilla bugzilla | = 2.12 | No fix listed |
| mozilla bugzilla | = 2.14 | No fix listed |
| mozilla bugzilla | = 2.14.1 | No fix listed |
| mozilla bugzilla | = 2.14.2 | No fix listed |
| mozilla bugzilla | = 2.14.3 | No fix listed |
| mozilla bugzilla | = 2.14.4 | No fix listed |
| mozilla bugzilla | = 2.14.5 | No fix listed |
| mozilla bugzilla | = 2.16 | No fix listed |
| mozilla bugzilla | = 2.16-rc1 | No fix listed |
| mozilla bugzilla | = 2.16-rc2 | No fix listed |
| mozilla bugzilla | = 2.16.1 | No fix listed |
| mozilla bugzilla | = 2.16.2 | No fix listed |
| mozilla bugzilla | = 2.16.3 | No fix listed |
| mozilla bugzilla | = 2.16.4 | No fix listed |
| mozilla bugzilla | = 2.16.5 | No fix listed |
| mozilla bugzilla | = 2.16.6 | No fix listed |
| mozilla bugzilla | = 2.16.7 | No fix listed |
| mozilla bugzilla | = 2.16.8 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla bugzilla | = 2.16.9 | No fix listed |
| mozilla bugzilla | = 2.16.10 | No fix listed |
| mozilla bugzilla | = 2.16.11 | No fix listed |
| mozilla bugzilla | = 2.16_rc2 | No fix listed |
| mozilla bugzilla | = 2.17 | No fix listed |
| mozilla bugzilla | = 2.17.1 | No fix listed |
| mozilla bugzilla | = 2.17.2 | No fix listed |
| mozilla bugzilla | = 2.17.3 | No fix listed |
| mozilla bugzilla | = 2.17.4 | No fix listed |
| mozilla bugzilla | = 2.17.5 | No fix listed |
| mozilla bugzilla | = 2.17.6 | No fix listed |
| mozilla bugzilla | = 2.17.7 | No fix listed |
| mozilla bugzilla | = 2.18 | No fix listed |
| mozilla bugzilla | = 2.18-rc1 | No fix listed |
| mozilla bugzilla | = 2.18-rc2 | No fix listed |
| mozilla bugzilla | = 2.18-rc3 | No fix listed |
| mozilla bugzilla | = 2.18.1 | No fix listed |
| mozilla bugzilla | = 2.18.2 | No fix listed |
| mozilla bugzilla | = 2.18.3 | No fix listed |
| mozilla bugzilla | = 2.18.4 | No fix listed |
| mozilla bugzilla | = 2.18.5 | No fix listed |
| mozilla bugzilla | = 2.18.6 | No fix listed |
| mozilla bugzilla | = 2.18.6+ | No fix listed |
| mozilla bugzilla | = 2.18.7 | No fix listed |
| mozilla bugzilla | = 2.18.8 | No fix listed |
| mozilla bugzilla | = 2.18.9 | No fix listed |
| mozilla bugzilla | = 2.19 | No fix listed |
| mozilla bugzilla | = 2.19.1 | No fix listed |
| mozilla bugzilla | = 2.19.2 | No fix listed |
| mozilla bugzilla | = 2.19.3 | No fix listed |
| mozilla bugzilla | = 2.20 | No fix listed |
| mozilla bugzilla | = 2.20-rc1 | No fix listed |
| mozilla bugzilla | = 2.20-rc2 | No fix listed |
| mozilla bugzilla | = 2.20.1 | No fix listed |
| mozilla bugzilla | = 2.20.2 | No fix listed |
| mozilla bugzilla | = 2.20.3 | No fix listed |
| mozilla bugzilla | = 2.20.4 | No fix listed |
| mozilla bugzilla | = 2.20.5 | No fix listed |
| mozilla bugzilla | = 2.20.6 | No fix listed |
| mozilla bugzilla | = 2.20.7 | No fix listed |
| mozilla bugzilla | = 2.21 | No fix listed |
| mozilla bugzilla | = 2.21.1 | No fix listed |
| mozilla bugzilla | = 2.21.2 | No fix listed |
| mozilla bugzilla | = 2.21.2-rc1 | No fix listed |
| mozilla bugzilla | = 2.22 | No fix listed |
| mozilla bugzilla | = 2.22-rc1 | No fix listed |
| mozilla bugzilla | = 2.22.1 | No fix listed |
| mozilla bugzilla | = 2.22.2 | No fix listed |
| mozilla bugzilla | = 2.22.3 | No fix listed |
| mozilla bugzilla | = 2.22.4 | No fix listed |
| mozilla bugzilla | = 2.22.5 | No fix listed |
| mozilla bugzilla | = 2.22.6 | No fix listed |
| mozilla bugzilla | = 2.22.7 | No fix listed |
| mozilla bugzilla | = 2.23 | No fix listed |
| mozilla bugzilla | = 2.23.1 | No fix listed |
| mozilla bugzilla | = 2.23.2 | No fix listed |
| mozilla bugzilla | = 2.23.3 | No fix listed |
| mozilla bugzilla | = 2.23.4 | No fix listed |
| mozilla bugzilla | = 3.0 | No fix listed |
| mozilla bugzilla | = 3.0-rc1 | No fix listed |
| mozilla bugzilla | = 3.0.0 | No fix listed |
| mozilla bugzilla | = 3.0.1 | No fix listed |
| mozilla bugzilla | = 3.0.2 | No fix listed |
| mozilla bugzilla | = 3.0.3 | No fix listed |
| mozilla bugzilla | = 3.0.4 | No fix listed |
| mozilla bugzilla | = 3.0.5 | No fix listed |
| mozilla bugzilla | = 3.0.6 | No fix listed |
| mozilla bugzilla | = 3.0.7 | No fix listed |
| mozilla bugzilla | = 3.0.8 | No fix listed |
| mozilla bugzilla | = 3.0.9 | No fix listed |
| mozilla bugzilla | = 3.0.10 | No fix listed |
| mozilla bugzilla | = 3.0.11 | No fix listed |
| mozilla bugzilla | = 3.0_rc1 | No fix listed |
| mozilla bugzilla | = 3.1.0 | No fix listed |
| mozilla bugzilla | = 3.1.1 | No fix listed |
| mozilla bugzilla | = 3.1.2 | No fix listed |
| mozilla bugzilla | = 3.1.3 | No fix listed |
| mozilla bugzilla | = 3.1.4 | No fix listed |
| mozilla bugzilla | = 3.2 | No fix listed |
| mozilla bugzilla | = 3.2-rc1 | No fix listed |
| mozilla bugzilla | = 3.2-rc2 | No fix listed |
| mozilla bugzilla | = 3.2.1 | No fix listed |
| mozilla bugzilla | = 3.2.2 | No fix listed |
| mozilla bugzilla | = 3.2.3 | No fix listed |
| mozilla bugzilla | = 3.2.4 | No fix listed |
| mozilla bugzilla | = 3.2.5 | No fix listed |
| mozilla bugzilla | = 3.2.6 | No fix listed |
| mozilla bugzilla | = 3.2.7 | No fix listed |
| mozilla bugzilla | = 3.2.8 | No fix listed |
| mozilla bugzilla | = 3.2.9 | No fix listed |
| mozilla bugzilla | = 3.2.10 | No fix listed |
| mozilla bugzilla | = 3.3 | No fix listed |
| mozilla bugzilla | = 3.3.1 | No fix listed |
| mozilla bugzilla | = 3.3.2 | No fix listed |
| mozilla bugzilla | = 3.3.3 | No fix listed |
| mozilla bugzilla | = 3.3.4 | No fix listed |
| mozilla bugzilla | = 3.4 | No fix listed |
| mozilla bugzilla | = 3.4-rc1 | No fix listed |
| mozilla bugzilla | = 3.4.1 | No fix listed |
| mozilla bugzilla | = 3.4.2 | No fix listed |
| mozilla bugzilla | = 3.4.3 | No fix listed |
| mozilla bugzilla | = 3.4.4 | No fix listed |
| mozilla bugzilla | = 3.4.5 | No fix listed |
| mozilla bugzilla | = 3.4.6 | No fix listed |
| mozilla bugzilla | = 3.4.7 | No fix listed |
| mozilla bugzilla | = 3.4.8 | No fix listed |
| mozilla bugzilla | = 3.4.9 | No fix listed |
| mozilla bugzilla | = 3.4.10 | No fix listed |
| mozilla bugzilla | = 3.4.11 | No fix listed |
| mozilla bugzilla | = 3.4.12 | No fix listed |
| mozilla bugzilla | = 3.4.13 | No fix listed |
| mozilla bugzilla | = 3.5 | No fix listed |
| mozilla bugzilla | = 3.5.1 | No fix listed |
| mozilla bugzilla | = 3.5.2 | No fix listed |
| mozilla bugzilla | = 3.5.3 | No fix listed |
| mozilla bugzilla | = 3.6 | No fix listed |
| mozilla bugzilla | = 3.6-rc1 | No fix listed |
| mozilla bugzilla | = 3.6.0 | No fix listed |
| mozilla bugzilla | = 3.6.1 | No fix listed |
| mozilla bugzilla | = 3.6.2 | No fix listed |
| mozilla bugzilla | = 3.6.3 | No fix listed |
| mozilla bugzilla | = 3.6.4 | No fix listed |
| mozilla bugzilla | = 3.6.5 | No fix listed |
| mozilla bugzilla | = 3.6.6 | No fix listed |
| mozilla bugzilla | = 3.6.7 | No fix listed |
| mozilla bugzilla | = 3.6.8 | No fix listed |
| mozilla bugzilla | = 3.6.9 | No fix listed |
| mozilla bugzilla | = 3.6.10 | No fix listed |
| mozilla bugzilla | = 3.6.11 | No fix listed |
| mozilla bugzilla | = 3.6.12 | No fix listed |
| mozilla bugzilla | = 3.6.13 | No fix listed |
| mozilla bugzilla | = 3.7 | No fix listed |
| mozilla bugzilla | = 3.7.1 | No fix listed |
| mozilla bugzilla | = 3.7.2 | No fix listed |
| mozilla bugzilla | = 3.7.3 | No fix listed |
| mozilla bugzilla | = 4.0 | No fix listed |
| mozilla bugzilla | = 4.0-rc1 | No fix listed |
| mozilla bugzilla | = 4.0-rc2 | No fix listed |
| mozilla bugzilla | = 4.0.1 | No fix listed |
| mozilla bugzilla | = 4.0.10 | No fix listed |
| mozilla bugzilla | = 4.0.11 | No fix listed |
| mozilla bugzilla | = 4.0.12 | No fix listed |
| mozilla bugzilla | = 4.0.13 | No fix listed |
| mozilla bugzilla | = 4.0.14 | No fix listed |
| mozilla bugzilla | = 4.1 | No fix listed |
| mozilla bugzilla | = 4.1.1 | No fix listed |
| mozilla bugzilla | = 4.1.2 | No fix listed |
| mozilla bugzilla | = 4.1.3 | No fix listed |
| mozilla bugzilla | = 4.2 | No fix listed |
| mozilla bugzilla | = 4.2-rc1 | No fix listed |
| mozilla bugzilla | = 4.2-rc2 | No fix listed |
| mozilla bugzilla | = 4.2.1 | No fix listed |
| mozilla bugzilla | = 4.2.2 | No fix listed |
| mozilla bugzilla | = 4.2.3 | No fix listed |
| mozilla bugzilla | = 4.2.4 | No fix listed |
| mozilla bugzilla | = 4.2.5 | No fix listed |
| mozilla bugzilla | = 4.2.6 | No fix listed |
| mozilla bugzilla | = 4.2.7 | No fix listed |
| mozilla bugzilla | = 4.2.8 | No fix listed |
| mozilla bugzilla | = 4.2.9 | No fix listed |
| mozilla bugzilla | = 4.2.10 | No fix listed |
| mozilla bugzilla | = 4.3 | No fix listed |
| mozilla bugzilla | = 4.3.1 | No fix listed |
| mozilla bugzilla | = 4.3.2 | No fix listed |
| mozilla bugzilla | = 4.3.3 | No fix listed |
| mozilla bugzilla | = 4.4 | No fix listed |
| mozilla bugzilla | = 4.4-rc1 | No fix listed |
| mozilla bugzilla | = 4.4-rc2 | No fix listed |
| mozilla bugzilla | = 4.4.1 | No fix listed |
| mozilla bugzilla | = 4.4.2 | No fix listed |
| mozilla bugzilla | = 4.4.3 | No fix listed |
| mozilla bugzilla | = 4.4.4 | No fix listed |
| mozilla bugzilla | = 4.4.5 | No fix listed |
| mozilla bugzilla | = 4.5 | No fix listed |
| mozilla bugzilla | = 4.5.1 | No fix listed |
References
- advisories.mageia.org
- FEDORA-2014-12591 vendor-advisory
- FEDORA-2014-12584 vendor-advisory
- FEDORA-2014-12530 vendor-advisory
- packetstormsecurity.com
- www.bugzilla.org vendor-advisory
- MDVSA-2014:200 vendor-advisory
- 1030978 vdb-entry
- bugzilla.mozilla.org patch