Vulnerability Database

317,094

Total vulnerabilities in the database

CVE-2003-1046

describecomponents.cgi in Bugzilla 2.17.3 and 2.17.4 does not properly verify group membership when bug entry groups are used, which allows remote attackers to list component descriptions for otherwise restricted products.

  • Published: Aug 18, 2004
  • Updated: Nov 9, 2025
  • CVE: CVE-2003-1046
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
mozilla / bugzilla 2.16.1 2.16.1.x
mozilla / bugzilla 2.16.2 2.16.2.x
mozilla / bugzilla 2.17.4 2.17.4.x
mozilla / bugzilla 2.10 2.10.x
mozilla / bugzilla 2.17.1 2.17.1.x
mozilla / bugzilla 2.16 2.16.x
mozilla / bugzilla 2.14.2 2.14.2.x
mozilla / bugzilla 2.14.3 2.14.3.x
mozilla / bugzilla 2.14.4 2.14.4.x
mozilla / bugzilla 2.12 2.12.x
mozilla / bugzilla 2.14 2.14.x
mozilla / bugzilla 2.8 2.8.x
mozilla / bugzilla 2.17.3 2.17.3.x
mozilla / bugzilla 2.14.5 2.14.5.x
mozilla / bugzilla 2.4 2.4.x
mozilla / bugzilla 2.6 2.6.x
mozilla / bugzilla 2.14.1 2.14.1.x
mozilla / bugzilla 2.16.3 2.16.3.x