VULNERABILITY INTELLIGENCE

CVE-2008-2104

CVSS score4 MEDIUM
EPSS probability0.93%
CISA KEVNot currently listed
Published2008-05-07
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:N/I:P/A:N

Description

The WebService in Bugzilla 3.1.3 allows remote authenticated users without canconfirm privileges to create NEW or ASSIGNED bug entries via a request to the XML-RPC interface, which bypasses the canconfirm check.

Primary references