CVE-2002-0808: Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when performing a mass change, sets the groupset of a...

Security readout for executives and security teams

This flaw could make private Bugzilla issues inherit the access group settings of another issue during bulk updates. In practical terms, a routine mass change could accidentally weaken or change who can see certain bugs, creating a confidentiality and access-control problem. Exposure appears limited to legacy Bugzilla deployments running the affected versions and allowing users to perform mass changes. Organizations with sensitive security, customer, or internal defect records in Bugzilla should treat affected systems as higher priority. Prioritize remediation if legacy Bugzilla still stores sensitive issues or is reachable by broad internal users. For organizations no longer running these versions, this is mainly a legacy exposure check. Mitigation focus: Upgrade Bugzilla beyond the affected versions identified in the advisory.; Review vendor and distribution guidance, including Red Hat advisory RHSA-2002:109.; Restrict mass-change privileges until affected systems are upgraded or retired..

Prepared

Jun 30, 2026, 12:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.