• Type: Public Security Vulnerability
• Resolution: Fixed
• Priority: Low
• Fix Version/s: 4.8.9
• Affects Version/s: 4.8.0
• Component/s: None
• Labels:

  • CVE-2021-43955
  • advisory
  • advisory-released
  • advisory-to-release
  • dont-import
  • release-48x
  • security

[FE-7397] CVE-2021-43955: /rest-service-fecru/server-v1 leaks information about installation directories

Marek Parfianowicz made changes - 09/Nov/2023 9:44 AM

Labels

Original: CVE-2021-43955 advisory advisory-released advisory-to-release dont-import release-48x release-490 security

New: CVE-2021-43955 advisory advisory-released advisory-to-release dont-import release-48x security

Marek Parfianowicz made changes - 09/Nov/2023 9:43 AM

Labels

Original: CVE-2021-43955 advisory advisory-released advisory-to-release dont-import release-490 security

New: CVE-2021-43955 advisory advisory-released advisory-to-release dont-import release-48x release-490 security

Marek Parfianowicz made changes - 09/May/2023 5:48 PM

Labels

Original: CVE-2021-43955 advisory advisory-released advisory-to-release dont-import security

New: CVE-2021-43955 advisory advisory-released advisory-to-release dont-import release-490 security

Security Metrics Bot made changes - 20/Mar/2022 8:28 PM

CVE ID

New: CVE-2021-43955

David Black made changes - 14/Mar/2022 3:36 AM

Labels

Original: advisory advisory-released advisory-to-release dont-import security

New: CVE-2021-43955 advisory advisory-released advisory-to-release dont-import security

David Black made changes - 14/Mar/2022 3:36 AM

Labels

Original: advisory advisory-to-release dont-import security

New: advisory advisory-released advisory-to-release dont-import security

David Black made changes - 14/Mar/2022 3:35 AM

Resolution		New: Fixed [ 1 ]
Security	Original: Atlassian Staff [ 10750 ]
Status	Original: Draft [ 12872 ]	New: Published [ 12873 ]

David Black made changes - 14/Mar/2022 3:35 AM

Summary

Original: /rest-service-fecru/server-v1 leaks information about installation directories

New: CVE-2021-43955: /rest-service-fecru/server-v1 leaks information about installation directories

David Black made changes - 14/Mar/2022 3:34 AM

Description

Original: The /rest-service-fecru/server-v1 resource in Fisheye and Crucible before version 4.8.9 allowed authenticated remote attackers to obtain information about installation directories via information disclosure vulnerability.

New: The /rest-service-fecru/server-v1 resource in Fisheye and Crucible before version 4.8.9 allowed authenticated remote attackers to obtain information about installation directories via information disclosure vulnerability. *Affected versions:*  * version < 4.8.9 *Fixed versions:*  * 4.8.9

David Black made changes - 14/Mar/2022 3:34 AM

Description

Original: This vulnerability affects certain versions of Atlassian Dev Tools. Please describe the impact of the vulnerability here. No known vulnerability could be read off of the parent.

New: The /rest-service-fecru/server-v1 resource in Fisheye and Crucible before version 4.8.9 allowed authenticated remote attackers to obtain information about installation directories via information disclosure vulnerability.

Load more older events