-
Type:
Bug
-
Resolution: Fixed
-
Priority:
Low
-
Affects Version/s: 3.2.0, 3.2.1, 3.2.2, 3.2.3, 3.3.0, 3.2.4, 3.2.5, 3.3.1, 3.4.0, 3.3.2, 3.2.6, 3.2.7, 3.3.3, 3.2.8, 3.3.4, 3.3.6, 3.3.5, 3.4.1, 3.5.0, 3.4.3, 3.4.4, 3.4.5, 3.3.7, 3.4.6, 3.4.7, 3.5.1, 3.5.2
-
Component/s: Plugins
-
Severity 2 - Major
The Atlassian Troubleshooting and Support Tools (ATST) plugin prior to version 1.17.2 which was used in Crowd & Crowd Data Center before version 3.6.0, allows an unprivileged user to initiate periodic log scans and send the results to a user-specified email address due to a missing authorization check. The email message may contain configuration information about the application that the plugin is installed into.
- relates to
-
-
- Closed
-