Home > Vulnerability Database > CVE-2010-2757

Mend Vulnerability Database

CVE-2010-2757

Good to know:

Date: August 16, 2010

The sudo feature in Bugzilla 2.22rc1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 does not properly send impersonation notifications, which makes it easier for remote authenticated users to impersonate other users without discovery.

Language: Perl

Severity Score

6.5

Related Resources (5)

Url: http://www.securityfocus.com/bid/42275

Url: http://www.vupen.com/english/advisories/2010/2035

Url: https://bugzilla.redhat.com/show_bug.cgi?id=623423

Url: https://nvd.nist.gov/vuln/detail/CVE-2010-2757

Url: https://www.mend.io/vulnerability-database/CVE-2010-2757

Severity Score

6.5

Weakness Type (CWE)

Cryptographic Issues

CWE-310

Top Fix

Upgrade Version

Upgrade to version bugzilla-3.7.3,release-3.7.3

Learn More

CVSS v2

Base Score:	6.5
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	SINGLE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend Vulnerability Database

We found results for “”

CVE-2010-2757

Good to know:

Date: August 16, 2010

Language: Perl

Severity Score

Related Resources (5)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v2

Do you need more information?