AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2002-0007

HIGH · CVSS 10 EPSS 2.37%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2002-01-31 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2002-0007
Severity
HIGH
CVSS
10
EPSS
2.37%

Original Filing — NVD Description

CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server.