CVE-2011-2380

Impact

Bugzilla 2.23.3 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 allows remote attackers to determine the existence of private group names via a crafted parameter during (1) bug creation or (2) bug editing.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/45501
• http://www.bugzilla.org/security/3.4.11/
• http://www.debian.org/security/2011/dsa-2322
• http://www.osvdb.org/74298
• http://www.osvdb.org/74299
• http://www.securityfocus.com/bid/49042
• https://bugzilla.mozilla.org/show_bug.cgi?id=653477
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69034
• http://secunia.com/advisories/45501
• http://www.bugzilla.org/security/3.4.11/
• http://www.debian.org/security/2011/dsa-2322
• http://www.osvdb.org/74298
• http://www.osvdb.org/74299
• http://www.securityfocus.com/bid/49042
• https://bugzilla.mozilla.org/show_bug.cgi?id=653477
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69034