| Package | Affected versions | Patched versions |
|---|---|---|
| bugzilla | = 2.22= 2.22.1= 2.22.3= 2.22.4= 2.22.5= 2.22.6= 2.22.7= 2.23= 2.23.1= 2.23.2= 2.23.3= 2.23.4= 2.4= 2.6= 2.8= 2.9= 3.0= 3.0.0= 3.0.1= 3.0.10= 3.0.11= 3.0.2= 3.0.3= 3.0.4= 3.0.5= 3.0.6= 3.0.7= 3.0.8= 3.0.9= 3.1.0= 3.1.1= 3.1.2= 3.1.3= 3.2= 3.2.2= 3.2.3= 3.2.4= 3.2.5= 3.2.6= 3.2.7= 3.3.1= 3.3.2= 3.3.3= 3.3.4= 3.4.1= 3.4.2= 3.4.3= 3.4.4= 3.4.5= 3.4.6= 3.4.7= 3.5.1= 3.5.2= 3.5.3= 3.6= 3.6.1= 3.7= 3.7.1= 3.7.2 |
The sudo feature in Bugzilla 2.22rc1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 does not properly send impersonation notifications, which makes it easier for remote authenticated users to impersonate other users without discovery.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free