Atlassian JIRA Multiple Security Bypass Weaknesses
BID:27095
Info
Atlassian JIRA Multiple Security Bypass Weaknesses
| Bugtraq ID: | 27095 |
| Class: | Access Validation Error |
| CVE: |
CVE-2007-6618 CVE-2007-6619 CVE-2007-6617 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 24 2007 12:00AM |
| Updated: | Jul 05 2016 10:00PM |
| Credit: | The vendor disclosed these issues. |
| Vulnerable: |
Atlassian JIRA 3.12 Atlassian JIRA 3.10.2 Atlassian JIRA 3.6.5 Atlassian JIRA 3.6.4 Atlassian JIRA 3.6.3 Atlassian JIRA 3.11 |
| Not Vulnerable: |
Atlassian JIRA 3.12.1 |
Discussion
Atlassian JIRA Multiple Security Bypass Weaknesses
Atlassian JIRA is prone to multiple security-bypass weaknesses that may allow an unauthorized attacker to bypass certain security restrictions to delete shared filters and change default language settings of arbitrary users.
These issues affect versions prior to JIRA 3.12.1.
Atlassian JIRA is prone to multiple security-bypass weaknesses that may allow an unauthorized attacker to bypass certain security restrictions to delete shared filters and change default language settings of arbitrary users.
These issues affect versions prior to JIRA 3.12.1.
Exploit / POC
Atlassian JIRA Multiple Security Bypass Weaknesses
Attackers can use standard tools to exploit these weaknesses.
Attackers can use standard tools to exploit these weaknesses.
Solution / Fix
Atlassian JIRA Multiple Security Bypass Weaknesses
Solution:
The vendor released an advisory and fixes to address these issues. Please see the references for more information.
Solution:
The vendor released an advisory and fixes to address these issues. Please see the references for more information.
References
Atlassian JIRA Multiple Security Bypass Weaknesses
References:
References:
- JIRA Security Advisory 2007-12-24 (Atlassian)
- JIRA Web Page (Atlassian)