Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
atlassianDblackATLASSIAN:CONF-38295
HistoryJul 15, 2015 - 1:35 a.m.

Update Java version bundled found in the installer to a version >= 1.8u51

2015-07-1501:35:17
dblack
jira.atlassian.com
70

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.975 High

EPSS

Percentile

100.0%

JSON

Update the bundled version of java to a version >= 1.8u51 (1.8 update 51), which fixes many security issues (http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html).
Included in the security fixes is a fix for logjam (CVE-2015-4000)

CPENameOperatorVersion
confluencele5.8.5
confluencelt5.8.8

Related

ibm 115
atlassian 5
openvas 20
nessus 33
osv 1
veracode 1
centos 1
mageia 1
fedora 6
fortinet 1
debiancve 1
aix 1
suse 2
citrix 1
debian 1
cisa 1
f5 2
oraclelinux 2
mozilla 1
prion 1
amazon 1
threatpost 1
ibm
ibm
Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM® WebSphere Real Time (CVE-2015-4000)
2018-06-15 07:03:12
Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects Rational Directory Server (CVE-2015-4000)
2018-06-17 05:03:06
Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects Rational Application Developer for WebSphere (CVE-2015-4000)
2020-02-05 00:09:48
atlassian
atlassian
Update Java version bundled found in the installer to a version >= 1.8u51
2015-07-15 01:43:18
Update Java version bundled found in the installer to a version >= 1.8u51
2015-07-15 01:35:17
Update Java version bundled found in the installer to a version >= 1.8u51
2015-07-15 01:43:18
openvas
openvas
CentOS Update for nss-util CESA-2015:1185 centos7
2015-06-26 00:00:00
CentOS Update for openssl CESA-2015:1072 centos7
2015-06-09 00:00:00
Fedora Update for nss FEDORA-2015-9130
2015-06-09 00:00:00
nessus
nessus
Fedora 21 : nss-3.19.1-1.0.fc21 / nss-softokn-3.19.1-1.0.fc21 / nss-util-3.19.1-1.0.fc21 (2015-9130) (Logjam)
2015-06-02 00:00:00
OracleVM 3.3 : openssl (OVMSA-2015-0065) (Logjam)
2015-06-05 00:00:00
Oracle Linux 6 / 7 : openssl (ELSA-2015-1072) (Logjam)
2015-06-05 00:00:00
osv
osv
nss - security update
2016-06-07 00:00:00
veracode
veracode
Man-in-the-Middle (MitM)
2019-01-15 09:06:07
centos
centos
openssl security update
2015-06-04 19:47:16
mageia
mageia
Updated filezilla package fixes security vulnerability
2015-07-05 20:22:03
fedora
fedora
[SECURITY] Fedora 21 Update: nss-util-3.19.1-1.0.fc21
2015-06-01 17:06:27
[SECURITY] Fedora 22 Update: nss-3.19.1-1.0.fc22
2015-06-02 15:17:04
[SECURITY] Fedora 21 Update: nss-softokn-3.19.1-1.0.fc21
2015-06-01 17:06:26
fortinet
fortinet
CVE-2015-4000 "Logjam" attack
2015-05-20 00:00:00
debiancve
debiancve
CVE-2015-4000
2015-05-21 00:59:00
aix
aix
Vulnerability in Diffie-Hellman ciphers affects sendmail on AIX,Vulnerability in Diffie-Hellman ciphers affects sendmail on VIOS
2015-08-07 15:15:59
suse
suse
Security update for MySQL (important)
2015-07-10 19:08:04
Security update for MySQL (important)
2015-07-02 21:05:19
citrix
citrix
CVE-2015-4000 - Citrix Security Advisory for DHE_EXPORT TLS Vulnerability
2015-05-22 04:00:00
debian
debian
[SECURITY] [DLA 507-1] nss security update
2016-06-07 10:00:27
cisa
cisa
OpenSSL Patches Multiple Vulnerabilities
2015-06-12 00:00:00
f5
f5
SOL16674 - TLS vulnerability CVE-2015-4000
2015-05-21 00:00:00
K16674 : TLS vulnerability CVE-2015-4000
2015-09-16 00:00:00
oraclelinux
oraclelinux
openssl security update
2015-06-04 00:00:00
nss security update
2015-06-25 00:00:00
mozilla
mozilla
NSS accepts export-length DHE keys with regular DHE cipher suites — Mozilla
2015-07-02 00:00:00
prion
prion
Code injection
2015-05-21 00:59:00
amazon
amazon
Medium: nss, nss-util
2015-07-22 10:00:00
threatpost
threatpost
OpenSSL Patches Five Flaws, Adds Protection Against Logjam Attack
2015-06-11 13:48:27

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.975 High

EPSS

Percentile

100.0%

JSON
Related for ATLASSIAN:CONF-38295
ibm115atlassian5openvas20nessus33osv1veracode1centos1mageia1fedora6fortinet1debiancve1aix1suse2citrix1debian1cisa1f52oraclelinux2mozilla1prion1amazon1threatpost1