[BSERV-12434] MITM in Repository Import - CVE-2020-14171 - Create and track feature requests for Atlassian products.

XML

Word

Printable

Details

Type: Bug
Status: Closed (View Workflow)
Priority: Medium
Resolution: Fixed
Affects Version/s: 4.9.0
Fix Version/s: 7.3.0, 7.2.4
Component/s: Repository - Import
Labels:
- CVE-2020-14171
- advisory
- advisory-released
- cvss-medium
- dob-pr
- mitm
- security

Symptom Severity:
Severity 2 - Major
Bug Fix Policy:
View Atlassian Server bug fix policy

Description

Affected versions of Atlassian Bitbucket Server allow remote attackers to intercept unencrypted repository import requests via Man-in-the-Middle (MITM) attack.

Affected versions:

4.9.0 <= version < 7.2.4

Fixed versions:

7.2.4
7.3.0

Attachments

Activity

People

Assignee:: Unassigned

Reporter:: Security Metrics Bot

Votes:: 0 Vote for this issue

Watchers:: 3 Start watching this issue

Dates

Due:: 22/Sep/2020

Created:: 23/Jun/2020 4:39 PM

Updated:: 04/Sep/2020 3:50 PM

Resolved:: 30/Jun/2020 5:44 PM