• Type: Bug
• Resolution: Fixed
• Priority: Medium
• Fix Version/s: 4.6.1
• Affects Version/s: None
• Component/s: None
• Labels:

  • CVE-2018-13399
  • advisory
  • advisory-released
  • basm
  • bugbounty
  • cvss-medium
  • privesc
  • security

[CRUC-8314] Weak permissions on the installation directory - CVE-2018-13399

Marek Parfianowicz made changes - 26/Nov/2018 1:55 PM

Fix Version/s

Original: 4.7.0 [ 81793 ]

Owen made changes - 16/Oct/2018 8:14 AM

Workflow

Original: FE-CRUC Bug Workflow [ 2941962 ]

New: JAC Bug Workflow v3 [ 2954358 ]

Owen made changes - 16/Oct/2018 4:41 AM

Workflow

Original: FECRU Development Workflow - Triage - Restricted [ 2859991 ]

New: FE-CRUC Bug Workflow [ 2941962 ]

David Black made changes - 16/Oct/2018 3:20 AM

Labels

Original: CVE-2018-13399 advisory advisory-to-release basm bugbounty cvss-medium privesc security

New: CVE-2018-13399 advisory advisory-released basm bugbounty cvss-medium privesc security

David Black made changes - 16/Oct/2018 3:20 AM

Security

Original: Reporter and Atlassian Staff [ 10751 ]

Sebastian Pacuk (Inactive) made changes - 05/Oct/2018 1:05 PM

Resolution		New: Fixed [ 1 ]
Status	Original: Open [ 1 ]	New: Closed [ 6 ]

Security Metrics Bot made changes - 05/Oct/2018 8:14 AM

Due Date

New: 23/Nov/2018

Marek Tokarski made changes - 05/Oct/2018 7:05 AM

Resolution	Original: Fixed [ 1 ]
Status	Original: Closed [ 6 ]	New: Open [ 1 ]

David Black made changes - 28/Sep/2018 7:35 AM

Description

Original: The Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows local attackers to escalate privileges because of weak permissions on the installation directory.

New: The Microsoft Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows local attackers to escalate privileges because of weak permissions on the installation directory.

David Black made changes - 28/Sep/2018 7:28 AM

Priority

Original: Low [ 4 ]

New: Medium [ 3 ]

Load more older events