Description
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when performing a mass change, sets the groupset of all bugs to the groupset of the first bug, which could inadvertently cause insecure groupset permissions to be assigned to some bugs.
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/4964
Patch, Vendor Advisory mailing-list
x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html
Vendor Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2002-109.html
Third Party Advisory vdb-entry
x_refsource_xf
http://www.iss.net/security_center/static/9305.php
Issue Tracking x_refsource_confirm
http://bugzilla.mozilla.org/show_bug.cgi?id=107718
Scores
EPSS
0.0112
EPSS Percentile
62.5%
Details
Status
published
Products (3)
mozilla/bugzilla
2.14
mozilla/bugzilla
2.14.1
mozilla/bugzilla
2.16 (2 CPE variants)
Published
Aug 12, 2002
Tracked Since
Feb 18, 2026