CVE-2014-1571

Published Oct 13, 2014 CVSS 2.0 · 4.0 Medium EPSS 1.4% KEV · Not listed
Description
Bugzilla 2.x through 4.0.x before 4.0.15, 4.1.x and 4.2.x before 4.2.11, 4.3.x and 4.4.x before 4.4.6, and 4.5.x before 4.5.6 allows remote authenticated users to obtain sensitive private-comment information by leveraging a role as a flag recipient, related to Bug.pm, Flag.pm, and a mail template.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2014-1647 Bugzilla 2.x through 4.0.x before 4.0.15, 4.1.x and 4.2.x before 4.2.11, 4.3.x and 4.4.x before 4.4.6, and 4.5.x before 4.5.6 allows remote authenticated users to obtain sensitive private-comment information by leveraging a role as a flag recipient, related to Bug.pm, Flag.pm, and a mail template.
History
Type Values Removed Values Added
Metrics epss

{'score': 0.00483}

epss

{'score': 0.00503}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mozilla
Published
Updated
Aug 6, 2024, 9:42 AM
Reserved
Jan 16, 2014, 12:00 AM
Status
Modified
Published
Oct 13, 2014, 1:55 AM
Modified
Jun 17, 2026, 12:05 AM