diff options
| author | Frédéric Buclin <LpSolit@gmail.com> | 2011-12-28 23:11:44 +0100 |
|---|---|---|
| committer | Frédéric Buclin <LpSolit@gmail.com> | 2011-12-28 23:11:44 +0100 |
| commit | 2d792a108434d9ea59ebf75ae09fb69cbab6fb71 (patch) | |
| tree | 3da27d1b0158d793d42cf87bb3fd479de558b525 /Bugzilla/WebService/Constants.pm | |
| parent | f8813fc6a94b4e8e6d5e77009458ed8cb5a856c7 (diff) | |
| download | bugzilla-2d792a108434d9ea59ebf75ae09fb69cbab6fb71.tar.gz bugzilla-2d792a108434d9ea59ebf75ae09fb69cbab6fb71.tar.xz | |
Bug 711714: (CVE-2011-3667) [SECURITY] The User.offer_account_by_email WebService method lets you create new user accounts independently of the value of Bugzilla::Auth::Verify::*::user_can_create_account
r=glob a=LpSolit
Diffstat (limited to 'Bugzilla/WebService/Constants.pm')
| -rw-r--r-- | Bugzilla/WebService/Constants.pm | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/Bugzilla/WebService/Constants.pm b/Bugzilla/WebService/Constants.pm index 123b14d68..ab3111eed 100644 --- a/Bugzilla/WebService/Constants.pm +++ b/Bugzilla/WebService/Constants.pm @@ -130,6 +130,7 @@ use constant WS_ERROR_CODE => { # User errors are 500-600. account_exists => 500, illegal_email_address => 501, + auth_cant_create_account => 501, account_creation_disabled => 501, account_creation_restricted => 501, password_too_short => 502, |