Loading...

XML

Word

Printable

Details

Type: Bug
Resolution: Fixed
Priority: High
Fix Version/s: 7.10.0, 7.9.2, 7.7.4, 7.8.4, 7.6.7
Affects Version/s: 7.2.0, 7.3.0, 7.4.0, 7.5.0, 7.6.0, 7.6.4, 7.7.1, 7.8.2, 7.9.1
Component/s: Login
Labels:
- CVE-2018-5231
- advisory
- advisory-released
- application-dos
- cvss-high
- ddos
- denial-of-service
- pse-request
- raid
- security
- triaged

Fixed in Long Term Support Release/s:

Download 7.6
Introduced in Version:
7.02
Symptom Severity:
Severity 1 - Critical
Bug Fix Policy:
View Atlassian Server bug fix policy

Description

The ForgotLoginDetails resource in Atlassian Jira before version 7.6.6, from version 7.7.0 before version 7.7.4, from version 7.8.0 before version 7.8.4 and from version 7.9.0 before version 7.9.2 allows remote attackers to perform a denial of service attack via sending requests to it.

Attachments

Activity

People

Assignee:: Unassigned

Reporter:: Security Metrics Bot

Votes:: 0 Vote for this issue

Watchers:: 7 Start watching this issue

Dates

Created:: 11/May/2018 5:57 AM

Updated:: 22/May/2020 8:24 AM

Resolved:: 16/Jul/2018 1:26 PM