Question 1

What is CVE-2002-0808?

Accepted Answer

CVE-2002-0808 is a high-severity software vulnerability with a CVSS score of 7.5. Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when performing a mass change, sets the groupset of all bugs to the groupset of the first bug, which could inadvertently cause insecure groupset permissions to be assigned to some bugs.

Question 2

Is CVE-2002-0808 being actively exploited?

Accepted Answer

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 1%.

Question 3

What products does CVE-2002-0808 affect?

Accepted Answer

Tracked products affected include Bugzilla. Check the version you run to see whether it is affected.

Question 4

How do I fix CVE-2002-0808?

Accepted Answer

Apply the vendor fix promptly. An official patch or advisory is available. Upgrade affected products to a fixed version.

CVE-2002-0808

Summary

Impact & exploitability

Affected products we track (1)

Recommendation

Additional information