VULNERABILITY INTELLIGENCE
CVE-2003-0012
CVSS score2.1 LOW
EPSS probability0.29%
CISA KEVNot currently listed
Published2003-01-17
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:P/A:N
Description
The data collection script for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 sets world-writable permissions for the data/mining directory when it runs, which allows local users to modify or delete the data.