The sudo feature in Bugzilla 2.22rc1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 does not properly send impersonation notifications, which makes it easier for remote authenticated users to impersonate other users without discovery.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T02:46:47.293Z
Reserved: 2010-07-14T00:00:00
Link: CVE-2010-2757

No data.

Status : Deferred
Published: 2010-08-16T15:14:12.320
Modified: 2025-04-11T00:51:21.963
Link: CVE-2010-2757

No data.