[CRUC-8314] Weak permissions on the installation directory - CVE-2018-13399 - Create and track feature requests for Atlassian products.

XML

Word

Printable

Details

Type: Bug
Status: Closed (View Workflow)
Priority: Medium
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 4.6.1
Component/s: None
Labels:
- CVE-2018-13399
- advisory
- advisory-released
- basm
- bugbounty
- cvss-medium
- privesc
- security

Symptom Severity:
Major
Bug Fix Policy:
View Atlassian Server bug fix policy

Description

The Microsoft Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows local attackers to escalate privileges because of weak permissions on the installation directory.

Attachments

Issue Links

is cloned from

FE-7105 Weak permissions on the installation directory - CVE-2018-13399

Closed

Activity

People

Assignee:

Unassigned

Reporter:

SecurityB

Participants:

David Black, SecurityB

Votes:

0 Vote for this issue

Watchers:

1 Start watching this issue

Dates

Due:

23/Nov/2018

Created:

28/Sep/2018 7:23 AM

Updated:

26/Nov/2018 1:55 PM

Resolved:

05/Oct/2018 1:05 PM

Last commented:

37 weeks, 6 days ago