The bundled Atlassian Activity Streams plugin had Improper Access control inside several rest inline action resource resource - CVE-2017-9506

🗓️ 21 Sep 2017 00:10:51Reported by dblackType

The Atlassian Activity Streams plugin had Improper Access control, allowing authenticated remote attackers to watch and receive notifications for Confluence pages and vote & watch JIRA issues without proper access

Reporter	Title	Published	Views	Family All 26
Atlassian	The bundled Atlassian OAuth plugin allows arbitrary HTTP requests to be proxied - CVE-2017-9506	30 Aug 201702:06	–	atlassian
Atlassian	The bundled Atlassian OAuth plugin allows arbitrary HTTP requests to be proxied - CVE-2017-9506	21 Mar 201720:59	–	atlassian
Atlassian	The bundled Atlassian OAuth plugin allows arbitrary HTTP requests to be proxied - CVE-2017-9506	30 Aug 201702:12	–	atlassian
Atlassian	The bundled Atlassian Activity Streams plugin had Improper Access control inside several rest inline action resource resource - CVE-2017-9506	21 Sep 201700:10	–	atlassian
Atlassian	The bundled Atlassian OAuth plugin allows arbitrary HTTP requests to be proxied - CVE-2017-9506	30 Aug 201702:06	–	atlassian
Atlassian	The bundled Atlassian OAuth plugin allows arbitrary HTTP requests to be proxied - CVE-2017-9506	21 Mar 201720:59	–	atlassian
Atlassian	The bundled Atlassian OAuth plugin allows arbitrary HTTP requests to be proxied - CVE-2017-9506	30 Aug 201702:12	–	atlassian
Tenable Nessus	Atlassian Bamboo < 6.0.0 OAuth plugin allows arbitrary HTTP requests to be proxied	28 Jun 201800:00	–	nessus
Tenable Nessus	Atlassian Bitbucket < 4.14.4 OAuth Plugin IconUriServlet Internal Network Resource Disclosure CSRF	28 Jun 201800:00	–	nessus
Tenable Nessus	Atlassian Confluence < 6.1.3 OAuth Plugin IconUriServlet Internal Network Resource Disclosure CSRF	28 Jun 201800:00	–	nessus