CVE-2010-2756

Published: Aug 16, 2010Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Search.pm in Bugzilla 2.19.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 allows remote attackers to determine the group memberships of arbitrary users via vectors involving the Search interface, boolean charts, and group-based pronouns.

Affected (78)

Products: Mozilla: Bugzilla

Mozilla

1 product

Bugzilla

Configuration A

78 vulnerable

Vulnerable Software	Affected Versions
Mozilla Bugzilla	Version 2.19.1
Mozilla Bugzilla	Version 2.19.2
Mozilla Bugzilla	Version 2.19.3
Mozilla Bugzilla	Version 2.20.1
Mozilla Bugzilla	Version 2.20.2
Mozilla Bugzilla	Version 2.20.3
Mozilla Bugzilla	Version 2.20.4
Mozilla Bugzilla	Version 2.20.5
Mozilla Bugzilla	Version 2.20.6
Mozilla Bugzilla	Version 2.20.7
Mozilla Bugzilla	Version 2.20
Mozilla Bugzilla	Version 2.20 rc1
Mozilla Bugzilla	Version 2.20 rc2
Mozilla Bugzilla	Version 2.21.1
Mozilla Bugzilla	Version 2.21.2
Mozilla Bugzilla	Version 2.21
Mozilla Bugzilla	Version 2.22.1
Mozilla Bugzilla	Version 2.22.3
Mozilla Bugzilla	Version 2.22.4
Mozilla Bugzilla	Version 2.22.5
Mozilla Bugzilla	Version 2.22.6
Mozilla Bugzilla	Version 2.22.7
Mozilla Bugzilla	Version 2.22
Mozilla Bugzilla	Version 2.22 rc1
Mozilla Bugzilla	Version 2.23.1
Mozilla Bugzilla	Version 2.23.2
Mozilla Bugzilla	Version 2.23.3
Mozilla Bugzilla	Version 2.23.4
Mozilla Bugzilla	Version 2.23
Mozilla Bugzilla	Version 2.2
Mozilla Bugzilla	Version 2.4
Mozilla Bugzilla	Version 2.6
Mozilla Bugzilla	Version 2.8
Mozilla Bugzilla	Version 2.9
Mozilla Bugzilla	Version 3.0.0
Mozilla Bugzilla	Version 3.0.10
Mozilla Bugzilla	Version 3.0.11
Mozilla Bugzilla	Version 3.0.1
Mozilla Bugzilla	Version 3.0.2
Mozilla Bugzilla	Version 3.0.3
Mozilla Bugzilla	Version 3.0.4
Mozilla Bugzilla	Version 3.0.5
Mozilla Bugzilla	Version 3.0.6
Mozilla Bugzilla	Version 3.0.7
Mozilla Bugzilla	Version 3.0.8
Mozilla Bugzilla	Version 3.0.9
Mozilla Bugzilla	Version 3.0
Mozilla Bugzilla	Version 3.0 rc1
Mozilla Bugzilla	Version 3.1.0
Mozilla Bugzilla	Version 3.1.1
Mozilla Bugzilla	Version 3.1.2
Mozilla Bugzilla	Version 3.1.3
Mozilla Bugzilla	Version 3.2.2
Mozilla Bugzilla	Version 3.2.3
Mozilla Bugzilla	Version 3.2.4
Mozilla Bugzilla	Version 3.2.5
Mozilla Bugzilla	Version 3.2.6
Mozilla Bugzilla	Version 3.2.7
Mozilla Bugzilla	Version 3.2
Mozilla Bugzilla	Version 3.3.1
Mozilla Bugzilla	Version 3.3.2
Mozilla Bugzilla	Version 3.3.3
Mozilla Bugzilla	Version 3.3.4
Mozilla Bugzilla	Version 3.4.1
Mozilla Bugzilla	Version 3.4.2
Mozilla Bugzilla	Version 3.4.3
Mozilla Bugzilla	Version 3.4.4
Mozilla Bugzilla	Version 3.4.5
Mozilla Bugzilla	Version 3.4.6
Mozilla Bugzilla	Version 3.4.7
Mozilla Bugzilla	Version 3.5.1
Mozilla Bugzilla	Version 3.5.2
Mozilla Bugzilla	Version 3.5.3
Mozilla Bugzilla	Version 3.6.1
Mozilla Bugzilla	Version 3.6
Mozilla Bugzilla	Version 3.7.1
Mozilla Bugzilla	Version 3.7.2
Mozilla Bugzilla	Version 3.7