PT-2008-1582 · Atlassian · Jira Enterprise Edition

Published 2008-01-03 · Updated 2008-11-15 · CVE-2007-6619

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Atlassian JIRA Enterprise Edition versions prior to 3.12.1

Description The issue is related to the Setup Wizard, which does not properly restrict setup attempts after the setup is complete. This allows remote attackers to change the default language.

Recommendations For versions prior to 3.12.1, update to version 3.12.1 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2007-6619

Affected Products

Jira Enterprise Edition

References · 6

• http://secunia.com/advisories/27954 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-6619 · Security Note
• http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2007-12-24 · Patch
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6619 · Note
• http://securityfocus.com/bid/27095 · Note
• http://osvdb.org/42770 · Note