CVE-2001-0330

Published Sep 18, 2001 CVSS 2.0 · 7.5 High EPSS 2.1% KEV · Not listed
Description
Bugzilla 2.10 allows remote attackers to access sensitive information, including the database username and password, via an HTTP request for the globals.pl file, which is normally returned by the web server without being executed.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2001-0330 Bugzilla 2.10 allows remote attackers to access sensitive information, including the database username and password, via an HTTP request for the globals.pl file, which is normally returned by the web server without being executed.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 8, 2024, 4:14 AM
Reserved
Apr 27, 2001, 12:00 AM
Status
Modified
Published
Jun 27, 2001, 4:00 AM
Modified
Jun 16, 2026, 9:54 PM