CVE-2019-15006

MITRE NVD CVE.ORG JSON API Print: PDF PDF

Summary

CVECVE-2019-15006
StatePUBLIC
Assigner[email protected]
Source PriorityCVE Program / NVD first with legacy fallback
Published2019-12-19 01:15:00 UTC
Updated2021-12-13 16:05:00 UTC
DescriptionThere was a man-in-the-middle (MITM) vulnerability present in the Confluence Previews plugin in Confluence Server and Confluence Data Center. This plugin was used to facilitate communication with the Atlassian Companion application. The Confluence Previews plugin in Confluence Server and Confluence Data Center communicated with the Companion application via the atlassian-domain-for-localhost-connections-only.com domain name, the DNS A record of which points at 127.0.0.1. Additionally, a signed certificate for the domain was publicly distributed with the Companion application. An attacker in the position to control DNS resolution of their victim could carry out a man-in-the-middle (MITM) attack between Confluence Server (or Confluence Data Center) and the atlassian-domain-for-localhost-connections-only.com domain intended to be used with the Companion application. This certificate has been revoked, however, usage of the atlassian-domain-for-localhost-connections-only.com domain name was still present in Confluence Server and Confluence Data Center. An attacker could perform the described attack by denying their victim access to certificate revocation information, and carry out a man-in-the-middle (MITM) attack to observe files being edited using the Companion application and/or modify them, and access some limited user information.

Risk And Classification

Problem Types: CWE-913

NVD Known Affected Configurations (CPE 2.3)

TypeVendorProductVersionUpdateEditionLanguage
Application Atlassian Confluence All All All All
Application Atlassian Confluence All All All All
Application Atlassian Confluence Server All All All All

References

ReferenceSourceLinkTags
SwiftOnSecurity on Twitter: "Me: Threat-hunting rare DNS lookups in a corporate network. Confluence: https://t.co/6GPMROKua2… " MISC twitter.com Issue Tracking, Third Party Advisory
Confluence Security Advisory - 2019-12-18 - Atlassian Documentation MISC confluence.atlassian.com Patch, Vendor Advisory
[CONFSERVER-59244] Confluence Server and Data Center - Atlassian Companion Man-in-the-Middle - CVE-2019-15006 - Create and track feature requests for Atlassian products. MISC jira.atlassian.com Patch, Vendor Advisory
Bugtraq: Confluence Server and Data Center Security Advisory - 2019-12-18 - CVE-2019-15006 BUGTRAQ seclists.org Mailing List, Third Party Advisory
Atlassian Confluence Man-In-The-Middle ≈ Packet Storm MISC packetstormsecurity.com Third Party Advisory, VDB Entry
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report