Lucene search

The bundled Atlassian Activity Streams plugin had Improper Access control inside several rest inline action resource resource - CVE-2017-9506

🗓️ 21 Sep 2017 00:51:10Reported by dblackType

The Atlassian Activity Streams plugin had Improper Access control, allowing authenticated remote attackers to watch and receive notifications for Confluence pages and vote & watch JIRA issues without proper access

Reporter	Title	Published	Views	Family All 29
Atlassian	The bundled Atlassian Activity Streams plugin had Improper Access control inside several rest inline action resource resource - CVE-2017-9506	21 Sep 201700:10	–	atlassian
Atlassian	The bundled Atlassian OAuth plugin allows arbitrary HTTP requests to be proxied - CVE-2017-9506	21 Mar 201720:59	–	atlassian
Atlassian	The bundled Atlassian OAuth plugin allows arbitrary HTTP requests to be proxied - CVE-2017-9506	30 Aug 201702:06	–	atlassian
Atlassian	The bundled Atlassian OAuth plugin allows arbitrary HTTP requests to be proxied - CVE-2017-9506	21 Mar 201720:59	–	atlassian
Atlassian	The bundled Atlassian OAuth plugin allows arbitrary HTTP requests to be proxied - CVE-2017-9506	30 Aug 201702:12	–	atlassian
Atlassian	The bundled Atlassian OAuth plugin allows arbitrary HTTP requests to be proxied - CVE-2017-9506	30 Aug 201702:06	–	atlassian
Atlassian	The bundled Atlassian OAuth plugin allows arbitrary HTTP requests to be proxied - CVE-2017-9506	30 Aug 201702:12	–	atlassian
Tenable Nessus	Atlassian FishEye < 4.3.2 OAuth Plugin IconUriServlet Internal Network Resource Disclosure CSRF	28 Jun 201800:00	–	nessus
Tenable Nessus	Atlassian Crucible < 4.3.2 OAuth Plugin IconUriServlet Internal Network Resource Disclosure CSRF	28 Jun 201800:00	–	nessus
Tenable Nessus	Atlassian Confluence < 6.1.3 OAuth Plugin IconUriServlet Internal Network Resource Disclosure CSRF	28 Jun 201800:00	–	nessus

Vulners

Node

atlassian jira_data_centerRange≤7.3.0

atlassian jira_data_centerRange<7.4.2

atlassian jira_data_centerRange<7.5.0

atlassian jira_data_centerRange<7.4.3

atlassian jira_data_centerRange<7.4.4

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Sep 2017 00:10Current

3.8Low risk

Vulners AI Score3.8

CVSS25.5

CVSS35.4

EPSS0.03177

SSVC