CVE-2010-2757: Mozilla Bugzilla

Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days.

The sudo feature in Bugzilla 2.22rc1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 does not properly send impersonation notifications, which makes it easier for remote authenticated users to impersonate other users without discovery.

Affected products

• Mozilla Bugzilla: version 2.4 only; version 2.6 only; version 2.8 only; version 2.9 only; version 2.22 only; version 2.22.1 only; …

Published 2010-08-16. Last modified 2026-06-16.