The login form in Bugzilla 2.x, 3.x, 4.x before 4.4.3, and 4.5.x before 4.5.3 does not properly handle a correctly authenticated but unintended login attempt, which makes it easier for remote authenticated users to obtain sensitive information by arranging for a victim to login to the attacker's account and then submit a vulnerability report, related to a "login CSRF" issue.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mozilla

Published: 2014-04-20T01:00:00

Updated: 2015-05-14T17:57:00

Reserved: 2014-01-16T00:00:00


Link: CVE-2014-1517

JSON object: View

cve-icon NVD Information

Status : Modified

Published: 2014-04-20T01:55:06.723

Modified: 2023-11-07T02:18:57.520


Link: CVE-2014-1517

JSON object: View

cve-icon Redhat Information

No data.

CWE