We have identified and fixed a vulnerability in FishEye and Crucible that results from behaviour of certain third-party frameworks used in FishEye and Crucible. This vulnerability allows any attacker to:
- Set the FishEye and Crucible instance to allow anonymous access
- Set the FishEye and Crucible instance to allow anonymous signup
All versions of FishEye and Crucible up to and including 2.7.14 are affected by this vulnerability. The vulnerability is fixed in FishEye and/or Crucible 2.8.0 and later.
Details of this vulnerability are available in the advisory at https://confluence.atlassian.com/display/FISHEYE/FishEye+and+Crucible+Security+Advisory+2012-08-21
and https://confluence.atlassian.com/display/CRUCIBLE/FishEye+and+Crucible+Security+Advisory+2012-08-21
- is cloned from
-
FE-4222 FishEye privilege escalation vulnerability
-
- Closed
-
- mentioned in
-
![[Atlassian Documentation] Page](/images/icons/generic_link_16.png "[Atlassian Documentation] Page")
Page
No Confluence page found with the given URL.
-
Page
No Confluence page found with the given URL.
-
Page
No Confluence page found with the given URL.
-
Page
No Confluence page found with the given URL.
-
Page Loading...
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
[CRUC-6188] Crucible privilege escalation vulnerability
| Remote Link | Original: This issue links to "Page (Atlassian Documentation)" [ 228241 ] |
| Remote Link | Original: This issue links to "Wiki Page (Atlassian Documentation - Confluence)" [ 22123 ] |
| Workflow | Original: FE-CRUC Bug Workflow [ 2941809 ] | New: JAC Bug Workflow v3 [ 2955813 ] |
| Workflow | Original: FECRU Development Workflow - Triage - Restricted [ 1511464 ] | New: FE-CRUC Bug Workflow [ 2941809 ] |
| Remote Link | Original: This issue links to "Page (Atlassian Documentation)" [ 228241 ] | New: This issue links to "Page (Atlassian Documentation)" [ 228241 ] |
| Remote Link | New: This issue links to "Page (Atlassian Documentation)" [ 228241 ] |
| Remote Link | Original: This issue links to "Page (Atlassian Documentation)" [ 228137 ] | New: This issue links to "Page (Atlassian Documentation)" [ 228137 ] |
| Remote Link | New: This issue links to "Page (Atlassian Documentation)" [ 228137 ] |
| Remote Link | Original: This issue links to "Page (Atlassian Documentation)" [ 200470 ] | New: This issue links to "Page (Atlassian Documentation)" [ 200470 ] |
| Remote Link | New: This issue links to "Page (Atlassian Documentation)" [ 200470 ] |