Closed
Bug 463247
Opened 16 years ago
Closed 16 years ago
Security Advisory for Bugzilla 3.2rc2, 3.0.6, 2.22.6, and 2.20.7
Categories
(Bugzilla :: Bugzilla-General, defect)
Tracking
()
RESOLVED
FIXED
Bugzilla 2.20
People
(Reporter: LpSolit, Assigned: LpSolit)
References
Details
Attachments
(1 file, 1 obsolete file)
We need a sec adv for bug 449931.
|
Assignee | |
Comment 1•16 years ago
|
||
Attachment #346589 -
Flags: review?(mkanat)
|
||
Updated•16 years ago
|
Attachment #346589 -
Flags: review?(mkanat) → review-
|
|
||
Comment 2•16 years ago
|
||
Comment on attachment 346589 [details]
sec adv, v1
>Summary
>=======
>
>Bugzilla is a Web-based bug-tracking system, used by a large number of
>software projects.
>
>This advisory covers a security issue that has recently been fixed
>in the Bugzilla code:
"a minor security issue"
> users can bypass access checks and take control on quips
> to display.
"and approve or disapprove quips themselves."
Otherwise looks fine.
|
|
Assignee | |
Comment 3•16 years ago
|
||
Attachment #346589 -
Attachment is obsolete: true
Attachment #346781 -
Flags: review?(mkanat)
|
|
||
Updated•16 years ago
|
Attachment #346781 -
Flags: review?(mkanat) → review+
|
|
||
Comment 4•16 years ago
|
||
Advisory sent.
Group: bugzilla-security
Status: ASSIGNED → RESOLVED
Closed: 16 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•