CVE-2014-1517

State: Published
Severity: Not scored
Published: Apr 20, 2014
Updated: Aug 6, 2024
Reserved: Jan 16, 2014

Description

The login form in Bugzilla 2.x, 3.x, 4.x before 4.4.3, and 4.5.x before 4.5.3 does not properly handle a correctly authenticated but unintended login attempt, which makes it easier for remote authenticated users to obtain sensitive information by arranging for a victim to login to the attacker's account and then submit a vulnerability report, related to a "login CSRF" issue.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://bugzilla.mozilla.org/show_bug.cgi?id=713926
http://www.bugzilla.org/security/4.0.11/
FEDORA-2014-5414vendor-advisory
http://git.mozilla.org/?p=bugzilla/bugzilla.git%3Ba=commit%3Bh=0e390970ba51b14a5dc780be7c6f0d6d7baa67e3
FEDORA-2014-5433vendor-advisory
1030128vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.