Bitbucket Data Center - Path traversal in the migration tool leads to RCE - CVE-2019-3397

🗓️ 18 Apr 2019 01:28:10Reported by [email protected]Type

Bitbucket Data Center migration tool allows path traversal leading to RCE - CVE-2019-3397. Update to version 6.1.2 or apply specific mitigations

Reporter	Title	Published	Views	Family All 17
0day.today	Bitbucket Path Traversal / Remote Code Execution Vulnerability	24 May 201900:00	–	zdt
ATTACKERKB	Atlassian BitBucket Data Center Migration Tool Directory Traversal Vulnerability	3 Jun 201900:00	–	attackerkb
Atlassian	Bitbucket Data Center - Path traversal in the migration tool leads to RCE - CVE-2019-3397	18 Apr 201901:28	–	atlassian
Tenable Nessus	Atlassian Bitbucket Data Center 5.13.x < 5.13.6 / 5.14.x < 5.14.4 / 5.15.x < 5.15.3 / 5.16.x < 5.16.3 / 6.0.x < 6.0.3 / 6.1.x < 6.1.2 Path Traversal Vulnerability (SA-2019-05-22)	22 Aug 201900:00	–	nessus
Tenable Nessus	Atlassian Bitbucket 5.13.x < 5.13.6 Path Traversal Vulnerability	11 Oct 201900:00	–	nessus
Tenable Nessus	Atlassian Bitbucket 5.14.x < 5.14.4 Path Traversal Vulnerability	11 Oct 201900:00	–	nessus
Tenable Nessus	Atlassian Bitbucket 5.15.x < 5.15.3 Path Traversal Vulnerability	11 Oct 201900:00	–	nessus
Tenable Nessus	Atlassian Bitbucket 5.16.x < 5.16.3 Path Traversal Vulnerability	11 Oct 201900:00	–	nessus
Tenable Nessus	Atlassian Bitbucket 6.0.x < 6.0.3 Path Traversal Vulnerability	11 Oct 201900:00	–	nessus
Tenable Nessus	Atlassian Bitbucket 6.1.x < 6.1.2 Path Traversal Vulnerability	11 Oct 201900:00	–	nessus