• Type: Bug
• Resolution: Fixed
• Priority: Medium
• Fix Version/s: 4.6.1
• Affects Version/s: None
• Component/s: None
• Labels:

  • CVE-2018-13399
  • advisory
  • advisory-released
  • basm
  • bugbounty
  • cvss-medium
  • privesc
  • security

[FE-7105] Weak permissions on the installation directory - CVE-2018-13399

Marek Parfianowicz made changes - 11/Sep/2019 11:04 AM

Link

New: This issue supersedes FE-7216 [ FE-7216 ]

Marek Parfianowicz made changes - 26/Nov/2018 1:58 PM

Fix Version/s

Original: 4.7.0 [ 81794 ]

Owen made changes - 16/Oct/2018 8:16 AM

Workflow

Original: FE-CRUC Bug Workflow [ 2945180 ]

New: JAC Bug Workflow v3 [ 2957472 ]

Owen made changes - 16/Oct/2018 4:43 AM

Workflow

Original: FECRU Development Workflow - Triage - Restricted [ 2859989 ]

New: FE-CRUC Bug Workflow [ 2945180 ]

David Black made changes - 16/Oct/2018 3:20 AM

Labels

Original: CVE-2018-13399 advisory advisory-to-release basm bugbounty cvss-medium privesc security

New: CVE-2018-13399 advisory advisory-released basm bugbounty cvss-medium privesc security

David Black made changes - 16/Oct/2018 3:20 AM

Security

Original: Reporter and Atlassian Staff [ 10751 ]

Sebastian Pacuk (Inactive) made changes - 05/Oct/2018 1:05 PM

Resolution		New: Fixed [ 1 ]
Status	Original: Open [ 1 ]	New: Closed [ 6 ]

Security Metrics Bot made changes - 05/Oct/2018 8:14 AM

Due Date

New: 23/Nov/2018

Marek Tokarski made changes - 05/Oct/2018 7:06 AM

Resolution	Original: Fixed [ 1 ]
Status	Original: Closed [ 6 ]	New: Open [ 1 ]

David Black made changes - 28/Sep/2018 7:43 AM

Description

Original: The Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows local attackers to escalate privileges because of weak permissions on the installation directory.

New: The Microsoft Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows local attackers to escalate privileges because of weak permissions on the installation directory.

Load more older events