CVE-2016-6668 - The HipChat plugin for various products leaks the secret key it uses to communicate with a linked HipChat instance.

🗓️ 12 Sep 2016 06:15:39Reported by dblackType

The Atlassian HipChat Integration Plugin for Bitbucket Server leaks secret key, allowing attackers full control over linked HipChat instance. Affected versions and fixes available for download. Temporary workaround provided if unable to upgrade

Reporter	Title	Published	Views	Family All 16
Tenable Nessus	Atlassian Confluence Server 5.9.x < 5.9.14 Secret Key Disclosure	14 Oct 201600:00	–	nessus
Tenable Nessus	Atlassian Confluence Server 5.10.x < 5.10.4 Secret Key Disclosure	14 Oct 201600:00	–	nessus
Atlassian	CVE-2016-6668 - The HipChat plugin for various products leaks the secret key it uses to communicate with a linked HipChat instance.	12 Sep 201606:15	–	atlassian
Atlassian	CVE-2016-6668 - The HipChat plugin for various products leaks the secret key it uses to communicate with a linked HipChat instance.	12 Sep 201606:53	–	atlassian
Atlassian	CVE-2016-6668 - The HipChat plugin for various products leaks the secret key it uses to communicate with a linked HipChat instance.	12 Sep 201606:53	–	atlassian
Atlassian	CVE-2016-6668 - The HipChat plugin for various products leaks the secret key it uses to communicate with a linked HipChat instance.	12 Sep 201606:27	–	atlassian
Atlassian	CVE-2016-6668 - The HipChat plugin for various products leaks the secret key it uses to communicate with a linked HipChat instance.	12 Sep 201606:27	–	atlassian
Atlassian	CVE-2016-6668 - The HipChat plugin for various products leaks the secret key it uses to communicate with a linked HipChat instance.	12 Sep 201606:53	–	atlassian
Atlassian	CVE-2016-6668 - The HipChat plugin for various products leaks the secret key it uses to communicate with a linked HipChat instance.	12 Sep 201606:27	–	atlassian
CNVD	Atlassian HipChat for JIRA Plugin Information Disclosure Vulnerability	28 Sep 201600:00	–	cnvd