The bundled Atlassian Activity Streams plugin had Improper Access control inside several rest inline action resource resource - CVE-2017-9506

🗓️ 21 Sep 2017 00:51:10Reported by dblackType

Improper Access control in Atlassian Activity Streams plugin - CVE-2017-9506. Allows remote authenticated attackers to watch Confluence pages, receive notifications, and vote on JIRA issues without proper access control.

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 30
Atlassian	The bundled Atlassian Activity Streams plugin had Improper Access control inside several rest inline action resource resource - CVE-2017-9506	21 Sep 201700:10	–	atlassian
Atlassian	The bundled Atlassian OAuth plugin allows arbitrary HTTP requests to be proxied - CVE-2017-9506	21 Mar 201720:59	–	atlassian
Atlassian	The bundled Atlassian OAuth plugin allows arbitrary HTTP requests to be proxied - CVE-2017-9506	30 Aug 201702:12	–	atlassian
Atlassian	The bundled Atlassian OAuth plugin allows arbitrary HTTP requests to be proxied - CVE-2017-9506	30 Aug 201702:06	–	atlassian
Atlassian	The bundled Atlassian OAuth plugin allows arbitrary HTTP requests to be proxied - CVE-2017-9506	30 Aug 201702:06	–	atlassian
Atlassian	The bundled Atlassian OAuth plugin allows arbitrary HTTP requests to be proxied - CVE-2017-9506	21 Mar 201720:59	–	atlassian
Atlassian	The bundled Atlassian OAuth plugin allows arbitrary HTTP requests to be proxied - CVE-2017-9506	30 Aug 201702:12	–	atlassian
Vulnrichment	CVE-2017-9506	23 Aug 201719:00	–	vulnrichment
Tenable Nessus	Atlassian Crowd < 2.11.2 OAuth Plugin IconUriServlet Internal Network Resource Disclosure CSRF	28 Jun 201800:00	–	nessus
Tenable Nessus	Atlassian Jira < 7.2.15 OAuth Plugin IconUriServlet Internal Network Resource Disclosure CSRF	28 Jun 201800:00	–	nessus

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Sep 2017 00:10Current

3.8Low risk

Vulners AI Score3.8

EPSS0.59792