[FE-7105] Weak permissions on the installation directory - CVE-2018-13399 - Create and track feature requests for Atlassian products.

Type: Bug
Resolution: Fixed
Priority: Medium
Fix Version/s: 4.6.1
Affects Version/s: None
Component/s: None
Labels:
- CVE-2018-13399
- advisory
- advisory-released
- basm
- bugbounty
- cvss-medium
- privesc
- security

Symptom Severity:
Severity 2 - Major
Bug Fix Policy:
View Atlassian Server bug fix policy

The Microsoft Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows local attackers to escalate privileges because of weak permissions on the installation directory.

was cloned as

CRUC-8314 Weak permissions on the installation directory - CVE-2018-13399

Closed

Assignee:: Unassigned

Reporter:: Security Metrics Bot

Affected customers:: 0 This affects my team

Watchers:: 1 Start watching this issue

Created:: 28/Sep/2018 7:14 AM

Updated:: 11/Sep/2019 11:04 AM

Resolved:: 05/Oct/2018 1:05 PM

Details

Description

Attachments

Issue Links

Forms

Activity

[FE-7105] Weak permissions on the installation directory - CVE-2018-13399

People

Dates