{"id":"CVE-2010-2757","aliases":["EUVD-2010-2761","GHSA-r9mq-3g26-7wv8"],"status":"published","title":"The sudo feature in Bugzilla 2.22rc1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and...","description":"The sudo feature in Bugzilla 2.22rc1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 does not properly send impersonation notifications, which makes it easier for remote authenticated users to impersonate other users without discovery.","severity":{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01251,"percentile":0.69606,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-310"],"published":"2010-08-13T19:00:00Z","modified":"2026-06-16T23:21:26Z","products":[{"vendor":"mozilla","product":"bugzilla"}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=450013","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2010/2035","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046534.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046518.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://secunia.com/advisories/40892","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=623423","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046546.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://www.securityfocus.com/bid/42275","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.bugzilla.org/security/3.2.7/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/41128","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2010/2205","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2757"},{"url":"http://www.bugzilla.org/security/3.2.7"},{"url":"https://github.com/advisories/GHSA-r9mq-3g26-7wv8"}],"sources":{"cve":[{"id":"CVE-2010-2757","description":"The sudo feature in Bugzilla 2.22rc1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 does not properly send impersonation notifications, which makes it easier for remote authenticated users to impersonate other users without discovery.","status":"published","published":"2010-08-13T19:00:00Z","modified":"2024-08-07T02:46:47.293Z","updated_at":"2026-11-02T14:33:27.354104Z"}],"euvd":[{"id":"EUVD-2010-2761","description":"The sudo feature in Bugzilla 2.22rc1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 does not properly send impersonation notifications, which makes it easier for remote authenticated users to impersonate other users without discovery.","status":"published","published":"2010-08-13T19:00:00Z","modified":"2024-08-07T02:46:47Z","updated_at":"2026-11-03T01:39:36.439258Z"}],"ghsa":[{"id":"GHSA-r9mq-3g26-7wv8","title":"The sudo feature in Bugzilla 2.22rc1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and...","description":"The sudo feature in Bugzilla 2.22rc1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 does not properly send impersonation notifications, which makes it easier for remote authenticated users to impersonate other users without discovery.","status":"published","published":"2022-05-17T05:48:50Z","modified":"2025-04-11T03:38:09Z","updated_at":"2026-11-02T15:01:05.853744Z"}],"nvd":[{"id":"CVE-2010-2757","description":"The sudo feature in Bugzilla 2.22rc1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 does not properly send impersonation notifications, which makes it easier for remote authenticated users to impersonate other users without discovery.","status":"published","published":"2010-08-16T15:14:12.32Z","modified":"2026-06-16T23:21:26.8Z","cvss":[{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-310"],"updated_at":"2026-11-02T14:01:49.736647Z"}]}}