CVE-2001-1404 — Mozilla Bugzilla vulnerability
5 documents5 sources
Severity
7.5HIGHNVD
EPSS
0.5%
top 32.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedSep 10
Latest updateApr 30
Description
Bugzilla before 2.14 stores user passwords in plaintext and sends password requests in an email message, which could allow attackers to gain privileges.
CVSS vector
AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4