Atlassian · Confluence Server and Data Center
CVE-2019-3398
Atlassian Confluence Server and Data Center Path Traversal Vulnerability
Was es ist
Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to add attachments to pages and / or blogs or to create a new space or a personal space or who has 'Admin' permissions for a space can exploit this path traversal vulnerability to write files to arbitrary locations which can lead to remote code execution on systems that run a vulnerable version of Confluence Server or Data Center. All versions of Confluence Server from 2.0.0 before 6.6.13 (the fixed version for 6.6.x), from 6.7.0 before 6.12.4 (the fixed version for 6.12.x), from 6.13.0 before 6.13.4 (the fixed version for 6.13.x), from 6.14.0 before 6.14.3 (the fixed version for 6.14.x), and from 6.15.0 before 6.15.2 are affected by this vulnerability.
CISA: Atlassian Confluence Server and Data Center contain a path traversal vulnerability in the downloadallattachments resource that may allow a privileged, remote attacker to write files. Exploitation can lead to remote code execution.
Was zu tun ist
Apply updates per vendor instructions.
Frist für US-Bundesbehörden: 3. Mai 2022
- Zur CISA-Liste hinzugefügt
- 3. November 2021
- Veröffentlicht
- 18. April 2019
- Schweregrad
- Hoch 8,8 CVSS 3.1
- Wahrscheinlichkeit von Angriffen in den nächsten 30 Tagen (EPSS)
- 97% unter den obersten 0,1% aller bekannten Schwachstellen
- Schwachstellentyp
- CWE-22
- Mehr Details
- NVD · CVE.org · CISA
Alle Quellen (6)
- https://jira.atlassian.com/browse/CONFSERVER-58102
- https://seclists.org/bugtraq/2019/Apr/33
- http://packetstormsecurity.com/files/152616/Confluence-Server-Data-Center-Path-Traversal.html
- http://www.securityfocus.com/bid/108067
- http://packetstormsecurity.com/files/155235/Atlassian-Confluence-6.15.1-Directory-Traversal.html
- http://packetstormsecurity.com/files/155245/Atlassian-Confluence-6.15.1-Directory-Traversal.html
Weitere ausgenutzte Schwachstellen von Atlassian
| Hinzugefügt | Schwachstelle | Produkt | Schweregrad | Angriffswahrscheinlichkeit |
|---|---|---|---|---|
| 03.11.2021 | Object-Graph Navigation Language (OGNL) Injection | Confluence Server and Data Center | Kritisch 9,8 | >99,9% |
| 15.10.2026 | Files or Directories Accessible to External Parties | Multiple Products | Kritisch 9,3 | 99,5% |
| 12.11.2024 | Path Traversal | Jira Server and Data Center | Mittel 5,3 | >99,9% |
| 24.01.2024 | Template Injection | Confluence Data Center and Server | Kritisch 10,0 | >99,9% |
| 07.11.2023 | Improper Authorization | Confluence Data Center and Server | Kritisch 10,0 | >99,9% |
| 05.10.2023 | Broken Access Control | Confluence Data Center and Server | Kritisch 10,0 | 99,2% |
| 30.09.2022 | Command Injection | Bitbucket Server and Data Center | Hoch 8,8 | 99,1% |
| 29.07.2022 | Questions For Confluence App Hard-coded Credentials | Confluence | Kritisch 9,8 | 98% |
Quellen: Known Exploited Vulnerabilities (CISA, gemeinfrei), CVE records (cve.org) und EPSS (FIRST). Die Angriffswahrscheinlichkeit ist die EPSS-Schätzung, dass jemand in den nächsten 30 Tagen versucht, die Schwachstelle auszunutzen.