CVE-2002-0810

MEDIUM

Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the syncshadowdb command to the HTML output, which could leak sensitive information, including plaintext passwords,...

Affects 1 product across 1 vendor.

CVSS 2.05.0
EPSS1.2%
Percentile68th
PatchPatched
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no integrity impact, no availability impact.
◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2002. A medium severity vulnerability affects Mozilla systems (CVE-2002-0810). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2002-GLOBAL-351124-M • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2002-0810?
This vulnerability was disclosed in 2002. A medium severity vulnerability affects Mozilla systems (CVE-2002-0810). No public exploit code is currently available. Isolate affected systems if patching is not feasible.
What is the CVSS score for CVE-2002-0810?
CVE-2002-0810 has CVSS 5.0 (Medium). Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N. EPSS: 1.2%.
Is CVE-2002-0810 actively exploited?
No confirmed active exploitation of CVE-2002-0810 as of 2026-05-30.
How do I remediate CVE-2002-0810?
Priority: MONITOR. PSIRT: [email protected]
What systems are affected by CVE-2002-0810?
CVE-2002-0810 affects Mozilla Bugzilla.
Vulnerability Details
CVE IDCVE-2002-0810
BSIDBS-2002-GLOBAL-351124-M BreachSpider Global ID
CVSS VectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Published2002-08-12
Last Modified2026-04-16
ICS Relevance0%
SourceNVD
Official Description

Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the syncshadowdb command to the HTML output, which could leak sensitive information, including plaintext passwords, if syncshadowdb fails.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the syncshadowdb command to the HTML output, which could leak sensitive information, including plaintext passwords, if syncshadowdb fails. CVSS vector: AV:N/AC:L/Au:N/C:P/I:N/A:N.

Exploitation Likelihood: MINIMAL

Affected Products
VendorProductAffected Versions
Mozilla Bugzilla 2.14 2.14.1 2.16
Remediation

No official vendor advisory link on record. See the CVE record →

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 8831 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hasha81295e9e316c01d98d45ff5fa6d6113f2ee522cc6de086b73797a1192ac982de434011bc7a36c236fe3986bfe3dde11ae921e2058f3513f24fe801aa5c173fb
Related CVEs affecting Mozilla
CVE-2026-2761 10.0 Sandbox escape in the Graphics: WebRender component. This vulnerability was f... CVE-2003-1043 10.0 SQL injection vulnerability in Bugzilla 2.16.3 and earlier, and 2.17.1 throug... CVE-2012-0467 10.0 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox... CVE-2006-6853 10.0 Buffer overflow in Durian Web Application Server 3.02 freeware on Windows all... CVE-2009-2465 10.0 Mozilla Firefox before 3.0.12 and Thunderbird allow remote attackers to cause...
View all Mozilla CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →