PT-2014-4616 · Atlassian · Jira

Philippe Arteau · Published 2014-03-07 · Updated 2014-03-10 · CVE-2014-2313

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Atlassian JIRA versions prior to 6.0.5

Description A directory traversal issue in the Importers plugin allows remote attackers to create arbitrary files.

Recommendations For versions prior to 6.0.5, update to version 6.0.5 or later to resolve the issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2014-2313

Affected Products

Jira

References · 3

• https://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2014-02-26 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-2313 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2313 · Note