Vulnerability Details CVE-2010-2470
Install/Filesystem.pm in Bugzilla 3.5.1 through 3.6.1 and 3.7 through 3.7.1, when use_suexec is enabled, uses world-readable permissions within (1) .bzr/ and (2) data/webdot/, which allows local users to obtain potentially sensitive data by reading files in these directories, a different vulnerability than CVE-2010-0180.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 12.6%
CVSS Severity
CVSS v2 Score 1.9
References
Products affected by CVE-2010-2470
-
cpe:2.3:a:mozilla:bugzilla:3.5.1
-
cpe:2.3:a:mozilla:bugzilla:3.5.2
-
cpe:2.3:a:mozilla:bugzilla:3.5.3
-
cpe:2.3:a:mozilla:bugzilla:3.6
-
cpe:2.3:a:mozilla:bugzilla:3.6.1
-
cpe:2.3:a:mozilla:bugzilla:3.7
-
cpe:2.3:a:mozilla:bugzilla:3.7.1