CVE-2001-0330
Bugzilla 2.10 - Unauthenticated Sensitive Information Exposure via globals.pl File Access
Title source: llmDescription
Bugzilla 2.10 allows remote attackers to access sensitive information, including the database username and password, via an HTTP request for the globals.pl file, which is normally returned by the web server without being executed.
References (3)
Core 3
Core References
Patch, Vendor Advisory vendor-advisory
x_refsource_atstake
http://www.atstake.com/research/advisories/2001/a043001-1.txt
Patch, Vendor Advisory vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/2671
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/6489
Scores
EPSS
0.0206
EPSS Percentile
79.2%
Details
Status
published
Products (4)
mozilla/bugzilla
2.4
mozilla/bugzilla
2.6
mozilla/bugzilla
2.8
mozilla/bugzilla
2.10
Published
Jun 27, 2001
Tracked Since
Feb 18, 2026