Attacker Value
Unknown
CVE-2014-1572
Attacker Value
Unknown
(0 users assessed)
Exploitability
Unknown
(0 users assessed)User Interaction
Unknown
Privileges Required
Unknown
Attack Vector
Unknown
MITRE ATT&CK
Log in to add MITRE ATT&CK tag
Add MITRE ATT&CK tactics and techniques that apply to this CVE.
Description
The confirm_create_account function in the account-creation feature in token.cgi in Bugzilla 2.x through 4.0.x before 4.0.15, 4.1.x and 4.2.x before 4.2.11, 4.3.x and 4.4.x before 4.4.6, and 4.5.x before 4.5.6 does not specify a scalar context for the realname parameter, which allows remote attackers to create accounts with unverified e-mail addresses by sending three realname values with realname=login_name as the second, as demonstrated by selecting an e-mail address with a domain name for which group privileges are automatically granted.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
Data provided by the National Vulnerability Database (NVD)
Base Score:
None
Impact Score:
Unknown
Exploitability Score:
Unknown
Attack Vector (AV):
Unknown
Attack Complexity (AC):
Unknown
Privileges Required (PR):
Unknown
User Interaction (UI):
Unknown
Scope (S):
Unknown
Confidentiality (C):
Unknown
Integrity (I):
Unknown
Availability (A):
Unknown
General Information
Vendors
Products
- bugzilla 2.0,
- bugzilla 2.10,
- bugzilla 2.12,
- bugzilla 2.14,
- bugzilla 2.14.1,
- bugzilla 2.14.2,
- bugzilla 2.14.3,
- bugzilla 2.14.4,
- bugzilla 2.14.5,
- bugzilla 2.16,
- bugzilla 2.16 rc2,
- bugzilla 2.16.1,
- bugzilla 2.16.10,
- bugzilla 2.16.11,
- bugzilla 2.16.2,
- bugzilla 2.16.3,
- bugzilla 2.16.4,
- bugzilla 2.16.5,
- bugzilla 2.16.6,
- bugzilla 2.16.7,
- bugzilla 2.16.8,
- bugzilla 2.16.9,
- bugzilla 2.17,
- bugzilla 2.17.1,
- bugzilla 2.17.2,
- bugzilla 2.17.3,
- bugzilla 2.17.4,
- bugzilla 2.17.5,
- bugzilla 2.17.6,
- bugzilla 2.17.7,
- bugzilla 2.18,
- bugzilla 2.18.1,
- bugzilla 2.18.2,
- bugzilla 2.18.3,
- bugzilla 2.18.4,
- bugzilla 2.18.5,
- bugzilla 2.18.6,
- bugzilla 2.18.6+,
- bugzilla 2.18.7,
- bugzilla 2.18.8,
- bugzilla 2.18.9,
- bugzilla 2.19,
- bugzilla 2.19.1,
- bugzilla 2.19.2,
- bugzilla 2.19.3,
- bugzilla 2.2,
- bugzilla 2.20,
- bugzilla 2.20.1,
- bugzilla 2.20.2,
- bugzilla 2.20.3,
- bugzilla 2.20.4,
- bugzilla 2.20.5,
- bugzilla 2.20.6,
- bugzilla 2.20.7,
- bugzilla 2.21,
- bugzilla 2.21.1,
- bugzilla 2.21.2,
- bugzilla 2.22,
- bugzilla 2.22.1,
- bugzilla 2.22.2,
- bugzilla 2.22.3,
- bugzilla 2.22.4,
- bugzilla 2.22.5,
- bugzilla 2.22.6,
- bugzilla 2.22.7,
- bugzilla 2.23,
- bugzilla 2.23.1,
- bugzilla 2.23.2,
- bugzilla 2.23.3,
- bugzilla 2.23.4,
- bugzilla 2.4,
- bugzilla 2.6,
- bugzilla 2.8,
- bugzilla 2.9,
- bugzilla 3.0,
- bugzilla 3.0 rc1,
- bugzilla 3.0.0,
- bugzilla 3.0.1,
- bugzilla 3.0.10,
- bugzilla 3.0.11,
- bugzilla 3.0.2,
- bugzilla 3.0.3,
- bugzilla 3.0.4,
- bugzilla 3.0.5,
- bugzilla 3.0.6,
- bugzilla 3.0.7,
- bugzilla 3.0.8,
- bugzilla 3.0.9,
- bugzilla 3.1.0,
- bugzilla 3.1.1,
- bugzilla 3.1.2,
- bugzilla 3.1.3,
- bugzilla 3.1.4,
- bugzilla 3.2,
- bugzilla 3.2.1,
- bugzilla 3.2.10,
- bugzilla 3.2.2,
- bugzilla 3.2.3,
- bugzilla 3.2.4,
- bugzilla 3.2.5,
- bugzilla 3.2.6,
- bugzilla 3.2.7,
- bugzilla 3.2.8,
- bugzilla 3.2.9,
- bugzilla 3.3,
- bugzilla 3.3.1,
- bugzilla 3.3.2,
- bugzilla 3.3.3,
- bugzilla 3.3.4,
- bugzilla 3.4,
- bugzilla 3.4.1,
- bugzilla 3.4.10,
- bugzilla 3.4.11,
- bugzilla 3.4.12,
- bugzilla 3.4.13,
- bugzilla 3.4.2,
- bugzilla 3.4.3,
- bugzilla 3.4.4,
- bugzilla 3.4.5,
- bugzilla 3.4.6,
- bugzilla 3.4.7,
- bugzilla 3.4.8,
- bugzilla 3.4.9,
- bugzilla 3.5,
- bugzilla 3.5.1,
- bugzilla 3.5.2,
- bugzilla 3.5.3,
- bugzilla 3.6,
- bugzilla 3.6.0,
- bugzilla 3.6.1,
- bugzilla 3.6.10,
- bugzilla 3.6.11,
- bugzilla 3.6.12,
- bugzilla 3.6.13,
- bugzilla 3.6.2,
- bugzilla 3.6.3,
- bugzilla 3.6.4,
- bugzilla 3.6.5,
- bugzilla 3.6.6,
- bugzilla 3.6.7,
- bugzilla 3.6.8,
- bugzilla 3.6.9,
- bugzilla 3.7,
- bugzilla 3.7.1,
- bugzilla 3.7.2,
- bugzilla 3.7.3,
- bugzilla 4.0,
- bugzilla 4.0.1,
- bugzilla 4.0.10,
- bugzilla 4.0.11,
- bugzilla 4.0.12,
- bugzilla 4.0.13,
- bugzilla 4.0.14,
- bugzilla 4.1,
- bugzilla 4.1.1,
- bugzilla 4.1.2,
- bugzilla 4.1.3,
- bugzilla 4.2,
- bugzilla 4.2.1,
- bugzilla 4.2.10,
- bugzilla 4.2.2,
- bugzilla 4.2.3,
- bugzilla 4.2.4,
- bugzilla 4.2.5,
- bugzilla 4.2.6,
- bugzilla 4.2.7,
- bugzilla 4.2.8,
- bugzilla 4.2.9,
- bugzilla 4.3,
- bugzilla 4.3.1,
- bugzilla 4.3.2,
- bugzilla 4.3.3,
- bugzilla 4.4,
- bugzilla 4.4.1,
- bugzilla 4.4.2,
- bugzilla 4.4.3,
- bugzilla 4.4.4,
- bugzilla 4.4.5,
- bugzilla 4.5,
- bugzilla 4.5.1,
- bugzilla 4.5.2,
- bugzilla 4.5.3,
- bugzilla 4.5.4,
- bugzilla 4.5.5,
- fedora 19,
- fedora 20,
- fedora 21
References
Advisory
Miscellaneous
