CVE-2017-9512

2017-07-1700:00:00

atlassian

www.cve.org

0.014 Low

EPSS

Percentile

86.5%

JSON

The mostActiveCommitters.do resource in Atlassian Fisheye and Crucible, before version 4.4.1 allows anonymous remote attackers to access sensitive information, for example email addresses of committers, as it lacked permission checks.

CNA Affected

[
  {
    "product": "Atlassian Fisheye and Crucible",
    "vendor": "Atlassian",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to version 4.4.1"
      }
    ]
  }
]

References

jira.atlassian.com/browse/CRUC-8053

jira.atlassian.com/browse/FE-6892

0.014 Low

EPSS

Percentile

86.5%

JSON

Related for CVELIST:CVE-2017-9512