system
Describe <CVE-2008-2104>.
user
What is <CVE-2008-2104>?
assistant
The WebService in Bugzilla 3.1.3 allows remote authenticated users without canconfirm privileges to create NEW or ASSIGNED bug entries via a request to the XML-RPC interface, which bypasses the canconfirm check..