Vulnetix
Try Vulnetix Request Demo
CVE-2014-1571 PUBLISHED CVSS 4 MEDIUM

Bugzilla 2.x through 4.0.x before 4.0.15, 4.1.x and 4.2.x before 4.2.11, 4.3.x and 4.4.x before 4.4.6, and 4.5.x before 4.5.6 allows remote authenticated users to obtain sensitive private-comment information by leveraging a role as a flag recipient, related to Bug.pm, Flag.pm, and a mail template.

EPSS 0.50% · 65.9th percentile

Risk Scores

CVSS v2.0
4
EPSS Score
0.50%
65.9th percentile

Affected Products

VendorProductVersions
mozillabugzilla3.6.12, 2.0, 2.2
n/an/an/a
fedoraprojectfedora21, 19, 20

Timeline

References

Open in Interactive Console →