CVE-2017-9506
Summary
| CVE | CVE-2017-9506 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2017-08-23 19:29:00 UTC |
| Updated | 2019-05-10 15:22:00 UTC |
| Description | The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remote attackers to access the content of internal network resources and/or perform an XSS attack via Server Side Request Forgery (SSRF). |
Risk And Classification
Problem Types: CWE-918
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Atlassian | Oauth | 1.3.0 | All | All | All |
| Application | Atlassian | Oauth | 1.3.1 | All | All | All |
| Application | Atlassian | Oauth | 1.3.10 | All | All | All |
| Application | Atlassian | Oauth | 1.3.2 | All | All | All |
| Application | Atlassian | Oauth | 1.3.3 | All | All | All |
| Application | Atlassian | Oauth | 1.3.4 | All | All | All |
| Application | Atlassian | Oauth | 1.3.5 | All | All | All |
| Application | Atlassian | Oauth | 1.3.6 | All | All | All |
| Application | Atlassian | Oauth | 1.3.7 | All | All | All |
| Application | Atlassian | Oauth | 1.3.8 | All | All | All |
| Application | Atlassian | Oauth | 1.3.9 | All | All | All |
| Application | Atlassian | Oauth | 1.4.0 | All | All | All |
| Application | Atlassian | Oauth | 1.4.0 | m1 | All | All |
| Application | Atlassian | Oauth | 1.4.0 | m2 | All | All |
| Application | Atlassian | Oauth | 1.4.1 | All | All | All |
| Application | Atlassian | Oauth | 1.5.0 | All | All | All |
| Application | Atlassian | Oauth | 1.5.0 | m1 | All | All |
| Application | Atlassian | Oauth | 1.5.0 | m3 | All | All |
| Application | Atlassian | Oauth | 1.6.0 | All | All | All |
| Application | Atlassian | Oauth | 1.6.0 | m1 | All | All |
| Application | Atlassian | Oauth | 1.6.0 | m4 | All | All |
| Application | Atlassian | Oauth | 1.6.1 | All | All | All |
| Application | Atlassian | Oauth | 1.7.0 | All | All | All |
| Application | Atlassian | Oauth | 1.8.0 | All | All | All |
| Application | Atlassian | Oauth | 1.8.0 | m1 | All | All |
| Application | Atlassian | Oauth | 1.8.1 | All | All | All |
| Application | Atlassian | Oauth | 1.8.2 | All | All | All |
| Application | Atlassian | Oauth | 1.8.3 | All | All | All |
| Application | Atlassian | Oauth | 1.8.4 | All | All | All |
| Application | Atlassian | Oauth | 1.8.5 | All | All | All |
| Application | Atlassian | Oauth | 1.9.0 | All | All | All |
| Application | Atlassian | Oauth | 1.9.0 | m1 | All | All |
| Application | Atlassian | Oauth | 1.9.0 | m2 | All | All |
| Application | Atlassian | Oauth | 1.9.1 | All | All | All |
| Application | Atlassian | Oauth | 1.9.10 | All | All | All |
| Application | Atlassian | Oauth | 1.9.11 | All | All | All |
| Application | Atlassian | Oauth | 1.9.2 | All | All | All |
| Application | Atlassian | Oauth | 1.9.3 | All | All | All |
| Application | Atlassian | Oauth | 1.9.4 | All | All | All |
| Application | Atlassian | Oauth | 1.9.5 | All | All | All |
| Application | Atlassian | Oauth | 1.9.6 | All | All | All |
| Application | Atlassian | Oauth | 1.9.7 | All | All | All |
| Application | Atlassian | Oauth | 1.9.8 | All | All | All |
| Application | Atlassian | Oauth | 1.9.9 | All | All | All |
| Application | Atlassian | Oauth | 2.0.0 | All | All | All |
| Application | Atlassian | Oauth | 2.0.1 | All | All | All |
| Application | Atlassian | Oauth | 2.0.2 | All | All | All |
| Application | Atlassian | Oauth | 2.0.3 | All | All | All |
| Application | Atlassian | Oauth | 1.3.0 | All | All | All |
| Application | Atlassian | Oauth | 1.3.1 | All | All | All |
| Application | Atlassian | Oauth | 1.3.10 | All | All | All |
| Application | Atlassian | Oauth | 1.3.2 | All | All | All |
| Application | Atlassian | Oauth | 1.3.3 | All | All | All |
| Application | Atlassian | Oauth | 1.3.4 | All | All | All |
| Application | Atlassian | Oauth | 1.3.5 | All | All | All |
| Application | Atlassian | Oauth | 1.3.6 | All | All | All |
| Application | Atlassian | Oauth | 1.3.7 | All | All | All |
| Application | Atlassian | Oauth | 1.3.8 | All | All | All |
| Application | Atlassian | Oauth | 1.3.9 | All | All | All |
| Application | Atlassian | Oauth | 1.4.0 | All | All | All |
| Application | Atlassian | Oauth | 1.4.0 | m1 | All | All |
| Application | Atlassian | Oauth | 1.4.0 | m2 | All | All |
| Application | Atlassian | Oauth | 1.4.1 | All | All | All |
| Application | Atlassian | Oauth | 1.5.0 | All | All | All |
| Application | Atlassian | Oauth | 1.5.0 | m1 | All | All |
| Application | Atlassian | Oauth | 1.5.0 | m3 | All | All |
| Application | Atlassian | Oauth | 1.6.0 | All | All | All |
| Application | Atlassian | Oauth | 1.6.0 | m1 | All | All |
| Application | Atlassian | Oauth | 1.6.0 | m4 | All | All |
| Application | Atlassian | Oauth | 1.6.1 | All | All | All |
| Application | Atlassian | Oauth | 1.7.0 | All | All | All |
| Application | Atlassian | Oauth | 1.8.0 | All | All | All |
| Application | Atlassian | Oauth | 1.8.0 | m1 | All | All |
| Application | Atlassian | Oauth | 1.8.1 | All | All | All |
| Application | Atlassian | Oauth | 1.8.2 | All | All | All |
| Application | Atlassian | Oauth | 1.8.3 | All | All | All |
| Application | Atlassian | Oauth | 1.8.4 | All | All | All |
| Application | Atlassian | Oauth | 1.8.5 | All | All | All |
| Application | Atlassian | Oauth | 1.9.0 | All | All | All |
| Application | Atlassian | Oauth | 1.9.0 | m1 | All | All |
| Application | Atlassian | Oauth | 1.9.0 | m2 | All | All |
| Application | Atlassian | Oauth | 1.9.1 | All | All | All |
| Application | Atlassian | Oauth | 1.9.10 | All | All | All |
| Application | Atlassian | Oauth | 1.9.11 | All | All | All |
| Application | Atlassian | Oauth | 1.9.2 | All | All | All |
| Application | Atlassian | Oauth | 1.9.3 | All | All | All |
| Application | Atlassian | Oauth | 1.9.4 | All | All | All |
| Application | Atlassian | Oauth | 1.9.5 | All | All | All |
| Application | Atlassian | Oauth | 1.9.6 | All | All | All |
| Application | Atlassian | Oauth | 1.9.7 | All | All | All |
| Application | Atlassian | Oauth | 1.9.8 | All | All | All |
| Application | Atlassian | Oauth | 1.9.9 | All | All | All |
| Application | Atlassian | Oauth | 2.0.0 | All | All | All |
| Application | Atlassian | Oauth | 2.0.1 | All | All | All |
| Application | Atlassian | Oauth | 2.0.2 | All | All | All |
| Application | Atlassian | Oauth | 2.0.3 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Piercing the Veil: Server Side Request Forgery to NIPRNet access | MISC | medium.com | Broken Link, Third Party Advisory |
| Don't Panic: There is a proxy in your Atlassian Product! (CVE-2017-9506) | MISC | dontpanic.42.nl | Exploit, Third Party Advisory |
| ZeroSecurity na Twitterze: "Abusing CVE-2017-9506 to access internal services and #hacking the Department of the Defense in the process #DOD #Exploit #InfoSec https://t.co/WjMlHGYqt8" | MISC | twitter.com | Exploit, Third Party Advisory |
| [OAUTH-344] The icon-uri servlet allows arbitrary HTTP requests to be proxied - CVE-2017-9506 - Ecosystem Jira | MISC | ecosystem.atlassian.net | Issue Tracking, Vendor Advisory |
| Ankit Anubhav on Twitter: "#JIRA users, attention. Attackers are using JIRA exploit CVE-2017-9506 to get inside your network for data theft. Its sort of an open redirect vuln, but in some cases it can even redirect to internal link-local address , using which they are trying to access AWS creds. (1/n)… https://t.co/NaZxNyXZaL" | MISC | twitter.com | Exploit, Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.