CVE-2019-15006

🗓️ 19 Dec 2019 00:50:12Reported by atlassianType

There was a man-in-the-middle (MITM) vulnerability present in the Confluence Previews plugin in Confluence Server and Confluence Data Center, allowing attackers to observe and modify files being edited using the Companion application

Reporter	Title	Published	Views	Family All 12
Atlassian	Confluence Server and Data Center - Atlassian Companion Man-in-the-Middle - CVE-2019-15006	11 Dec 201904:01	–	atlassian
Atlassian	Confluence Server and Data Center - Atlassian Companion Man-in-the-Middle - CVE-2019-15006	11 Dec 201904:01	–	atlassian
Circl	CVE-2019-15006	15 Mar 202414:52	–	circl
Cvelist	CVE-2019-15006	19 Dec 201900:50	–	cvelist
EUVD	EUVD-2019-6093	7 Oct 202500:30	–	euvd
NVD	CVE-2019-15006	19 Dec 201901:15	–	nvd
OSV	CVE-2019-15006	19 Dec 201901:15	–	osv
Prion	Information disclosure	19 Dec 201901:15	–	prion
Symantec	Atlassian Companion CVE-2019-15006 Security Bypass Vulnerability	5 Dec 201900:00	–	symantec
Tenable Nessus	Atlassian Confluence 6.11.x < 6.13.10 Man-In-The-Middle	5 Jul 202100:00	–	nessus

NVD

Node

atlassian confluenceRange6.11.0–6.13.10

atlassian confluence_serverRange6.14.0–6.15.10

atlassian confluence_serverRange7.0.1–7.0.5

atlassian confluence_serverRange7.1.0–7.1.2

[
  {
    "product": "Confluence Server",
    "vendor": "Atlassian",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "6.11.0",
        "versionType": "custom"
      },
      {
        "lessThan": "6.13.10",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "6.14.0",
        "versionType": "custom"
      },
      {
        "lessThan": "6.15.10",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "7.0.1",
        "versionType": "custom"
      },
      {
        "lessThan": "7.0.5",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "7.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "7.1.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "7.2.0-beta1",
        "versionType": "custom"
      },
      {
        "lessThan": "7.2.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
jira	www.jira.atlassian.com/browse/CONFSERVER-59244
twitter	www.twitter.com/SwiftOnSecurity/status/1202034106495832067
seclists	www.seclists.org/bugtraq/2019/Dec/36
packetstormsecurity	www.packetstormsecurity.com/files/155742/Atlassian-Confluence-Man-In-The-Middle.html
confluence	www.confluence.atlassian.com/doc/confluence-security-advisory-2019-12-18-982324349.html

21 Nov 2024 04:27Current

6.2Medium risk

Vulners AI Score6.2

CVSS 25.8

CVSS 3.16.5

EPSS0.0764

CWE-913