CVE-2010-2470
Bugzilla 3.5.1-3.6.1 and 3.7-3.7.1 - Unprotected User Data Exposure via World-Readable Permissions
Title source: llmDescription
Install/Filesystem.pm in Bugzilla 3.5.1 through 3.6.1 and 3.7 through 3.7.1, when use_suexec is enabled, uses world-readable permissions within (1) .bzr/ and (2) data/webdot/, which allows local users to obtain potentially sensitive data by reading files in these directories, a different vulnerability than CVE-2010-0180.
References (1)
Core 1
Core References
Patch x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=561797
Scores
EPSS
0.0031
EPSS Percentile
23.1%
Details
CWE
CWE-264
Status
published
Products (7)
mozilla/bugzilla
3.5.1
mozilla/bugzilla
3.5.2
mozilla/bugzilla
3.5.3
mozilla/bugzilla
3.6 (2 CPE variants)
mozilla/bugzilla
3.6.1
mozilla/bugzilla
3.7
mozilla/bugzilla
3.7.1
Published
Jun 28, 2010
Tracked Since
Feb 18, 2026