CVE-2001-1401: Bugzilla before 2.14 does not properly restrict access to confidential bugs, which could allow Bugzilla use...

Security readout for executives and security teams

CVE-2001-1401 is an old Bugzilla access-control flaw. In Bugzilla versions before 2.14, authenticated users could potentially view confidential bug records they should not see. The business risk is exposure of private defect, customer, or vulnerability information from legacy Bugzilla deployments. Exposure is most likely in organizations still running Bugzilla before 2.14, including legacy packaged deployments referenced by Red Hat. The CVE describes abuse by Bugzilla users, so risk centers on authenticated users who should not have access to confidential bugs. Prioritize remediation if any legacy Bugzilla instance still stores confidential or security-sensitive bugs. Modern environments are unlikely to be affected unless old Bugzilla code remains deployed. Mitigation focus: Upgrade Bugzilla to 2.14 or a vendor-supported fixed release.; Apply relevant vendor packages, including Red Hat advisory updates where applicable.; Restrict access to legacy Bugzilla instances until upgraded..

Prepared

Jul 1, 2026, 06:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.