5

CVE-2011-2380

Bugzilla 2.23.3 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 allows remote attackers to determine the existence of private group names via a crafted parameter during (1) bug creation or (2) bug editing.

Data is provided by the National Vulnerability Database (NVD)
Mozilla ≫ Bugzilla Version2.22.7
Mozilla ≫ Bugzilla Version2.23
Mozilla ≫ Bugzilla Version2.23.1
Mozilla ≫ Bugzilla Version2.23.2
Mozilla ≫ Bugzilla Version2.23.3
Mozilla ≫ Bugzilla Version3.4
Mozilla ≫ Bugzilla Version3.4 Updaterc1
Mozilla ≫ Bugzilla Version3.4.1
Mozilla ≫ Bugzilla Version3.4.2
Mozilla ≫ Bugzilla Version3.4.3
Mozilla ≫ Bugzilla Version3.4.4
Mozilla ≫ Bugzilla Version3.4.5
Mozilla ≫ Bugzilla Version3.4.6
Mozilla ≫ Bugzilla Version3.4.7
Mozilla ≫ Bugzilla Version3.4.8
Mozilla ≫ Bugzilla Version3.4.9
Mozilla ≫ Bugzilla Version3.4.10
Mozilla ≫ Bugzilla Version3.4.11
Mozilla ≫ Bugzilla Version3.5
Mozilla ≫ Bugzilla Version3.5.1
Mozilla ≫ Bugzilla Version3.5.2
Mozilla ≫ Bugzilla Version3.5.3
Mozilla ≫ Bugzilla Version3.6
Mozilla ≫ Bugzilla Version3.6 Updaterc1
Mozilla ≫ Bugzilla Version3.6.0
Mozilla ≫ Bugzilla Version3.6.1
Mozilla ≫ Bugzilla Version3.6.2
Mozilla ≫ Bugzilla Version3.6.3
Mozilla ≫ Bugzilla Version3.6.4
Mozilla ≫ Bugzilla Version3.6.5
Mozilla ≫ Bugzilla Version3.7
Mozilla ≫ Bugzilla Version3.7.1
Mozilla ≫ Bugzilla Version3.7.2
Mozilla ≫ Bugzilla Version3.7.3
Mozilla ≫ Bugzilla Version4.0
Mozilla ≫ Bugzilla Version4.0 Updaterc1
Mozilla ≫ Bugzilla Version4.0 Updaterc2
Mozilla ≫ Bugzilla Version4.0.1
Mozilla ≫ Bugzilla Version4.1
Mozilla ≫ Bugzilla Version4.1.1
Mozilla ≫ Bugzilla Version4.1.2
Mozilla ≫ Bugzilla Version3.0 Updaterc1
Mozilla ≫ Bugzilla Version3.0.0
Mozilla ≫ Bugzilla Version3.0.1
Mozilla ≫ Bugzilla Version3.0.2
Mozilla ≫ Bugzilla Version3.0.3
Mozilla ≫ Bugzilla Version3.0.4
Mozilla ≫ Bugzilla Version3.0.5
Mozilla ≫ Bugzilla Version3.0.6
Mozilla ≫ Bugzilla Version3.0.7
Mozilla ≫ Bugzilla Version3.0.8
Mozilla ≫ Bugzilla Version3.0.9
Mozilla ≫ Bugzilla Version3.0.10
Mozilla ≫ Bugzilla Version3.0.11
Mozilla ≫ Bugzilla Version3.1.0
Mozilla ≫ Bugzilla Version3.1.1
Mozilla ≫ Bugzilla Version3.1.2
Mozilla ≫ Bugzilla Version3.1.3
Mozilla ≫ Bugzilla Version3.1.4
Mozilla ≫ Bugzilla Version3.2 Updaterc1
Mozilla ≫ Bugzilla Version3.2 Updaterc2
Mozilla ≫ Bugzilla Version3.2.1
Mozilla ≫ Bugzilla Version3.2.2
Mozilla ≫ Bugzilla Version3.2.3
Mozilla ≫ Bugzilla Version3.2.4
Mozilla ≫ Bugzilla Version3.2.5
Mozilla ≫ Bugzilla Version3.2.6
Mozilla ≫ Bugzilla Version3.2.7
Mozilla ≫ Bugzilla Version3.2.8
Mozilla ≫ Bugzilla Version3.2.9
Mozilla ≫ Bugzilla Version3.2.10
Mozilla ≫ Bugzilla Version3.3.1
Mozilla ≫ Bugzilla Version3.3.2
Mozilla ≫ Bugzilla Version3.3.3
Mozilla ≫ Bugzilla Version3.3.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.69% 0.694
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.