The login form in Bugzilla 2.x, 3.x, 4.x before 4.4.3, and 4.5.x before 4.5.3 does not properly handle a correctly authenticated but unintended login attempt, which makes it easier for remote authenticated users to obtain sensitive information by arranging for a victim to login to the attacker's account and then submit a vulnerability report, related to a "login CSRF" issue.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mozilla

Published: 2014-04-20T01:00:00

Updated: 2024-08-06T09:42:36.285Z

Reserved: 2014-01-16T00:00:00

Link: CVE-2014-1517

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2014-04-20T01:55:06.723

Modified: 2024-11-21T02:04:27.790

Link: CVE-2014-1517

cve-icon Redhat

No data.