← Database

CVE-2001-1404

HIGH CVSS: 7.5 Published: 2001-09-10 Modified: 2026-06-16

Description

Bugzilla before 2.14 stores user passwords in plaintext and sends password requests in an email message, which could allow attackers to gain privileges.

Affected Platforms

Mozilla Bugzilla

Weakness Type

NVD-CWE-Other

References