VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 10, 2001· Updated Jun 16, 2026

CVE-2001-1407

CVE-2001-1407

Description

Bugzilla before 2.14 allows Bugzilla users to bypass group security checks by marking a bug as the duplicate of a restricted bug, which adds the user to the CC list of the restricted bug and allows the user to view the bug.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Mozilla Corporation/Bugzillallm-fuzzy7 versions
    <2.14+ 6 more
    • (no CPE)range: <2.14
    • cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.