Information disclosure of repository HTTP password in logs - CVE-2017-18112

Affected versions of Atlassian FishEye allow remote attackers to view the HTTP password of a repository via an Information Disclosure vulnerability in the logging feature.

Affected versions:

• version < 4.8.3

Fixed versions:

• 4.8.3
• 4.9.0