Field Assessment
AI analysis pending.
CVE
CVE-2003-1046
Severity
HIGH
CVSS
7.5
EPSS
1.35%
Original Filing — NVD Description
describecomponents.cgi in Bugzilla 2.17.3 and 2.17.4 does not properly verify group membership when bug entry groups are used, which allows remote attackers to list component descriptions for otherwise restricted products.