Atlassian Activity Streams CVE-2017-9513 Security Bypass Vulnerability

Bugtraq ID:	102869
Class:	Design Error
CVE:	CVE-2017-9513
Remote:	Yes
Local:	No
Published:	Jan 29 2018 12:00AM
Updated:	Jan 29 2018 12:00AM
Credit:	Security Metrics Bot
Vulnerable:	Atlassian Activity Streams 6.0 Atlassian Activity Streams 5.3 Atlassian Activity Streams 5.2 Atlassian Activity Streams 5.0 Atlassian Activity Streams 4.1
Not Vulnerable:	Atlassian Activity Streams 6.3

Atlassian Activity Streams CVE-2017-9513 Security Bypass Vulnerability

Atlassian Activity Streams is prone to a security-bypass vulnerability.

An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks.

Versions prior to Activity Streams 6.3.0 are vulnerable.

Atlassian Activity Streams CVE-2017-9513 Security Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Atlassian Activity Streams CVE-2017-9513 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Atlassian Activity Streams CVE-2017-9513 Security Bypass Vulnerability

References:

• Activity Streams Homepage (Atlassian)
  
• Improper Access control inside several rest inline action resource resources - C (Atlassian)