• Type: Public Security Vulnerability
• Resolution: Fixed
• Priority: Low
• Fix Version/s: 4.1.2, 4.0.4
• Affects Version/s: 4.0.3, 4.1.1
• Component/s: None
• Labels:

  • advisory
  • advisory-released
  • dont-import
  • security

[CWD-5685] Pre-Authorization Limited Arbitrary File Read in Crowd - CVE-2020-36240

Security Metrics Bot made changes - 16/Sep/2021 5:28 AM

CVE ID

New: CVE-2020-36240

David Black made changes - 01/Mar/2021 1:55 AM

Labels

Original: advisory advisory-to-release dont-import security

New: advisory advisory-released dont-import security

David Black made changes - 01/Mar/2021 1:55 AM

Security

Original: Reporter and Atlassian Staff [ 10751 ]

David Black made changes - 01/Mar/2021 1:55 AM

Resolution		New: Fixed [ 1 ]
Security	Original: Atlassian Staff [ 10750 ]	New: Reporter and Atlassian Staff [ 10751 ]
Status	Original: Draft [ 12872 ]	New: Published [ 12873 ]

David Black made changes - 01/Mar/2021 1:53 AM

Description

Original: The ResourceDownloadRewriteRule class in Crowd before version 4.0.4, and from version 4.1.0 before 4.1.2 allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check. h3. Affected versions:  * version < 4.0.4  * 4.10.0 ≤ version < 4.1.2 h4. Fixed versions:  * 4.0.4  * 4.1.2

New: The ResourceDownloadRewriteRule class in Crowd before version 4.0.4, and from version 4.1.0 before 4.1.2 allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check. h3. Affected versions:  * version < 4.0.4  * 4.10.0 ≤ version < 4.1.2 h4. Fixed versions:  * 4.0.4  * 4.1.2 This vulnerability is attributed to Amit Laish, a security researcher from GE Digital.

David Black made changes - 01/Mar/2021 1:52 AM

Description

Original: This vulnerability affects certain versions of Atlassian Crowd. Please describe the impact of the vulnerability here. No known vulnerability could be read off of the parent.

New: The ResourceDownloadRewriteRule class in Crowd before version 4.0.4, and from version 4.1.0 before 4.1.2 allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check. h3. Affected versions:  * version < 4.0.4  * 4.10.0 ≤ version < 4.1.2 h4. Fixed versions:  * 4.0.4  * 4.1.2

David Black made changes - 01/Mar/2021 1:41 AM

Summary

Original: Major Security Report Disclosure - Pre-Authorization Arbitrary File Read [Confluence, Jira, Crowd]

New: Pre-Authorization Limited Arbitrary File Read in Crowd - CVE-2020-36240

David Black made changes - 01/Mar/2021 1:40 AM

Link

New: This issue relates to CONFSERVER-60469 [ CONFSERVER-60469 ]

Security Metrics Bot made changes - 16/Feb/2021 6:29 PM

Labels

New: advisory advisory-to-release dont-import security

Security Metrics Bot created issue - 16/Feb/2021 6:29 PM