PT-2017-18975 · Atlassian · Oauth Plugin+2

Publicado 2017-08-23 · Atualizado 2019-05-10 · CVE-2017-9506

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Atlassian OAuth Plugin versions 1.3.0 through 1.9.11 Atlassian OAuth Plugin versions 2.0.0 through 2.0.3

Description The issue allows remote attackers to access internal network resources and/or perform an XSS attack via Server Side Request Forgery (SSRF) through the IconUriServlet. This affects the Atlassian OAuth Plugin, potentially impacting Jira Work Management and Jira Software.

Recommendations For Atlassian OAuth Plugin versions 1.3.0 through 1.9.11, update to version 1.9.12 or later. For Atlassian OAuth Plugin versions 2.0.0 through 2.0.3, update to version 2.0.4 or later.

Exploit

Correção

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2017-9506

Produtos afetados

Oauth Plugin

Jira

Jira Work Management

Referências · 11

• 🔥 https://github.com/random-robbie/Jira-Scan · Exploit
• 🔥 https://twitter.com/Zer0Security/status/983529439433777152 · Exploit
• 🔥 https://twitter.com/ankit_anubhav/status/973566620676382721 · Exploit
• 🔥 http://dontpanic.42.nl/2017/12/there-is-proxy-in-your-atlassian.html · Exploit
• https://unit42.paloaltonetworks.com/exploits-interactsh · Nota
• https://medium.com/bugbountywriteup/piercing-the-veil-server-side-request-forgery-to-niprnet-access-171018bca2c3 · Nota
• https://osv.dev/vulnerability/CVE-2017-9506 · Aviso do Fabricante
• https://jira.atlassian.com/browse/JRASERVER-65862 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-9506 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9506 · Nota de Segurança
• https://ecosystem.atlassian.net/browse/OAUTH-344 · Aviso do Fabricante