PT-2014-4617 · Atlassian · Jira

Philippe Arteau · Published 2014-03-07 · Updated 2015-07-29 · CVE-2014-2314

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Atlassian JIRA versions prior to 6.0.4

Description A directory traversal issue exists, allowing remote attackers to create arbitrary files.

Recommendations For versions prior to 6.0.4, update to version 6.0.4 or later to resolve the issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2014-2314

Affected Products

Jira

References · 7

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/jira_collector_traversal.rb · Exploit
• 🔥 http://exploit-db.com/exploits/32725 · Exploit
• 🔥 http://blog.h3xstream.com/2014/02/jira-path-traversal-explained.html · Exploit
• 🔥 https://exploit-db.com/exploits/32725 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-2314 · Security Note
• https://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2014-02-26 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2314 · Note