Lucene search

CVE-2012-2926

🗓️ 22 May 2012 15:02:55Reported by [email protected]Type

Atlassian JIRA, Confluence, FishEye, Crucible, Bamboo, and Crowd versions before specified releases are vulnerable to arbitrary file reading and denial of service attack

Reporter	Title	Published	Views	Family All 11
Prion	Design/Logic Flaw	22 May 201215:55	–	prion
CVE	CVE-2012-2926	22 May 201215:55	–	cve
Metasploit	Atlassian Crowd XML Entity Expansion Remote File Access	27 Jun 201208:21	–	metasploit
Cvelist	CVE-2012-2926	22 May 201215:00	–	cvelist
Packet Storm	Atlassian Crowd XML Entity Expansion Remote File Access	1 Sep 202400:00	–	packetstorm
Packet Storm	Atlassian JIRA Arbitrary File Read	4 Mar 202500:00	–	packetstorm
OpenVAS	Atlassian Crowd XML Parsing Denial of Service Vulnerability	11 Jul 201200:00	–	openvas
OpenVAS	Atlassian Crowd XML Parser Vulnerability (JRA-27719) - Active Check	11 Jul 201200:00	–	openvas
Atlassian	Parsing of external XML entities can be exploited to retrieve files or make HTTP requests on the target network	18 Jun 201322:44	–	atlassian
Atlassian	Parsing of external XML entities can be exploited to retrieve files or make HTTP requests on the target network	18 Jun 201322:44	–	atlassian

Nvd

Node

atlassian bambooRange<3.3.4

atlassian bambooRange3.4–3.4.5

atlassian confluenceRange<3.5.16

atlassian confluence_serverRange4.0–4.0.7

atlassian confluence_serverRange4.1–4.1.10

atlassian crowdRange<2.0.9

atlassian crowdRange2.1–2.1.2

atlassian crowdRange2.2.0–2.2.9

atlassian crowdRange2.3.0–2.3.7

atlassian crowdRange2.4.0–2.4.1

atlassian crucibleRange<2.5.8

atlassian crucibleRange2.6–2.6.8

atlassian crucibleRange2.7–2.7.12

atlassian fisheyeRange<2.5.8

atlassian fisheyeRange2.6–2.6.8

atlassian fisheyeRange2.7–2.7.12

atlassian jiraRange<5.0.1

Source	Link
secunia	www.secunia.com/advisories/49146
confluence	www.confluence.atlassian.com/display/DOC/Confluence+Security+Advisory+2012-05-17
confluence	www.confluence.atlassian.com/display/CROWD/Crowd+Security+Advisory+2012-05-17
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/75682
confluence	www.confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2012-05-17
osvdb	www.osvdb.org/81993
confluence	www.confluence.atlassian.com/display/BAMBOO/Bamboo+Security+Advisory+2012-05-17
confluence	www.confluence.atlassian.com/display/FISHEYE/FishEye+and+Crucible+Security+Advisory+2012-05-17
securityfocus	www.securityfocus.com/bid/53595
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/75697

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

22 May 2012 15:55Current

9.1High risk

Vulners AI Score9.1

CVSS26.4

CVSS39.1

EPSS0.46397