{"id":"CVE-2011-3667","url":"https://www.cyber-defence.io/tools/cve/CVE-2011-3667","generatedAt":"2026-10-27T17:56:42.767Z","title":"The User.offer_account_by_email WebService method in Bugzilla 2.x and 3.x before 3.4.13, 3.5.x and 3.6.x before 3.6.7, 3.7.x and 4.0.x before 4.0.3, and 4.1.x through 4.1.3, when createemailregexp is not empty, does not properly handle…","description":"The User.offer_account_by_email WebService method in Bugzilla 2.x and 3.x before 3.4.13, 3.5.x and 3.6.x before 3.6.7, 3.7.x and 4.0.x before 4.0.3, and 4.1.x through 4.1.3, when createemailregexp is not empty, does not properly handle user_can_create_account settings, which allows remote attackers to create user accounts by leveraging a token contained in an e-mail message.","published":"2012-01-02T19:55:02.000Z","lastModified":"2026-06-16T23:33:44.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":6.8,"severity":"MEDIUM","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P"},"cwe":["CWE-287"],"affected":["mozilla/bugzilla"],"epss":{"score":0.00993,"percentile":0.62358,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.99%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2011-12/0184.html","source":"cve@mitre.org"},{"url":"http://www.bugzilla.org/security/3.4.12/","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=711714","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/72042","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2011-12/0184.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugzilla.org/security/3.4.12/","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=711714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/72042","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-3667","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}