PT-2008-1582 · Atlassian · Jira Enterprise Edition

Publicado 2008-01-03 · Atualizado 2008-11-15 · CVE-2007-6619

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Atlassian JIRA Enterprise Edition versions prior to 3.12.1

Description The issue is related to the Setup Wizard, which does not properly restrict setup attempts after the setup is complete. This allows remote attackers to change the default language.

Recommendations For versions prior to 3.12.1, update to version 3.12.1 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2007-6619

Produtos afetados

Jira Enterprise Edition

Referências · 6

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6619 · Nota
• http://secunia.com/advisories/27954 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-6619 · Nota de Segurança
• http://securityfocus.com/bid/27095 · Nota
• http://osvdb.org/42770 · Nota
• http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2007-12-24 · Correção