CVE-2010-2756
Summary
| CVE | CVE-2010-2756 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2010-08-16 15:14:12 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | Search.pm in Bugzilla 2.19.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 allows remote attackers to determine the group memberships of arbitrary users via vectors involving the Search interface, boolean charts, and group-based pronouns. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
NoneAvailability
NoneAV:N/AC:L/Au:N/C:P/I:N/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Mozilla | Bugzilla | 2.19.1 | All | All | All |
| Application | Mozilla | Bugzilla | 2.19.2 | All | All | All |
| Application | Mozilla | Bugzilla | 2.19.3 | All | All | All |
| Application | Mozilla | Bugzilla | 2.2 | All | All | All |
| Application | Mozilla | Bugzilla | 2.20 | All | All | All |
| Application | Mozilla | Bugzilla | 2.20 | rc1 | All | All |
| Application | Mozilla | Bugzilla | 2.20 | rc2 | All | All |
| Application | Mozilla | Bugzilla | 2.20.1 | All | All | All |
| Application | Mozilla | Bugzilla | 2.20.2 | All | All | All |
| Application | Mozilla | Bugzilla | 2.20.3 | All | All | All |
| Application | Mozilla | Bugzilla | 2.20.4 | All | All | All |
| Application | Mozilla | Bugzilla | 2.20.5 | All | All | All |
| Application | Mozilla | Bugzilla | 2.20.6 | All | All | All |
| Application | Mozilla | Bugzilla | 2.20.7 | All | All | All |
| Application | Mozilla | Bugzilla | 2.21 | All | All | All |
| Application | Mozilla | Bugzilla | 2.21.1 | All | All | All |
| Application | Mozilla | Bugzilla | 2.21.2 | All | All | All |
| Application | Mozilla | Bugzilla | 2.22 | All | All | All |
| Application | Mozilla | Bugzilla | 2.22 | rc1 | All | All |
| Application | Mozilla | Bugzilla | 2.22.1 | All | All | All |
| Application | Mozilla | Bugzilla | 2.22.3 | All | All | All |
| Application | Mozilla | Bugzilla | 2.22.4 | All | All | All |
| Application | Mozilla | Bugzilla | 2.22.5 | All | All | All |
| Application | Mozilla | Bugzilla | 2.22.6 | All | All | All |
| Application | Mozilla | Bugzilla | 2.22.7 | All | All | All |
| Application | Mozilla | Bugzilla | 2.23 | All | All | All |
| Application | Mozilla | Bugzilla | 2.23.1 | All | All | All |
| Application | Mozilla | Bugzilla | 2.23.2 | All | All | All |
| Application | Mozilla | Bugzilla | 2.23.3 | All | All | All |
| Application | Mozilla | Bugzilla | 2.23.4 | All | All | All |
| Application | Mozilla | Bugzilla | 2.4 | All | All | All |
| Application | Mozilla | Bugzilla | 2.6 | All | All | All |
| Application | Mozilla | Bugzilla | 2.8 | All | All | All |
| Application | Mozilla | Bugzilla | 2.9 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0 | rc1 | All | All |
| Application | Mozilla | Bugzilla | 3.0.0 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.1 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.10 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.11 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.2 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.3 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.4 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.5 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.6 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.7 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.8 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.9 | All | All | All |
| Application | Mozilla | Bugzilla | 3.1.0 | All | All | All |
| Application | Mozilla | Bugzilla | 3.1.1 | All | All | All |
| Application | Mozilla | Bugzilla | 3.1.2 | All | All | All |
| Application | Mozilla | Bugzilla | 3.1.3 | All | All | All |
| Application | Mozilla | Bugzilla | 3.2 | All | All | All |
| Application | Mozilla | Bugzilla | 3.2.2 | All | All | All |
| Application | Mozilla | Bugzilla | 3.2.3 | All | All | All |
| Application | Mozilla | Bugzilla | 3.2.4 | All | All | All |
| Application | Mozilla | Bugzilla | 3.2.5 | All | All | All |
| Application | Mozilla | Bugzilla | 3.2.6 | All | All | All |
| Application | Mozilla | Bugzilla | 3.2.7 | All | All | All |
| Application | Mozilla | Bugzilla | 3.3.1 | All | All | All |
| Application | Mozilla | Bugzilla | 3.3.2 | All | All | All |
| Application | Mozilla | Bugzilla | 3.3.3 | All | All | All |
| Application | Mozilla | Bugzilla | 3.3.4 | All | All | All |
| Application | Mozilla | Bugzilla | 3.4.1 | All | All | All |
| Application | Mozilla | Bugzilla | 3.4.2 | All | All | All |
| Application | Mozilla | Bugzilla | 3.4.3 | All | All | All |
| Application | Mozilla | Bugzilla | 3.4.4 | All | All | All |
| Application | Mozilla | Bugzilla | 3.4.5 | All | All | All |
| Application | Mozilla | Bugzilla | 3.4.6 | All | All | All |
| Application | Mozilla | Bugzilla | 3.4.7 | All | All | All |
| Application | Mozilla | Bugzilla | 3.5.1 | All | All | All |
| Application | Mozilla | Bugzilla | 3.5.2 | All | All | All |
| Application | Mozilla | Bugzilla | 3.5.3 | All | All | All |
| Application | Mozilla | Bugzilla | 3.6 | All | All | All |
| Application | Mozilla | Bugzilla | 3.6.1 | All | All | All |
| Application | Mozilla | Bugzilla | 3.7 | All | All | All |
| Application | Mozilla | Bugzilla | 3.7.1 | All | All | All |
| Application | Mozilla | Bugzilla | 3.7.2 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Alerts - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| [SECURITY] Fedora 13 Update: bugzilla-3.4.8-2.fc13 | af854a3a-2127-422b-91ae-364da2661108 | lists.fedoraproject.org | |
| 3.2.7, 3.4.7, 3.6.1, and 3.7.2 Security Advisory :: Bugzilla :: bugzilla.org | af854a3a-2127-422b-91ae-364da2661108 | www.bugzilla.org | |
| [SECURITY] Fedora 12 Update: bugzilla-3.4.8-1.fc12 | af854a3a-2127-422b-91ae-364da2661108 | lists.fedoraproject.org | |
| 417048 – (CVE-2010-2756) [SECURITY] Boolean charts let me query for users being in any given group | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.mozilla.org | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| Fedora update for bugzilla - Advisories - Community | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Bug 623423 – CVE-2010-2756 CVE-2010-2757 CVE-2010-2758 CVE-2010-2759 bugzilla: multiple vulnerabilities corrected in 3.4.8/3.6.2 | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.redhat.com | |
| Malformed Request | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| [SECURITY] Fedora 14 Update: bugzilla-3.6.2-1.fc14 | af854a3a-2127-422b-91ae-364da2661108 | lists.fedoraproject.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.