A Vulnerability in Atlassian Data Center Products Could Allow for Arbitrary File Access
A vulnerability in Atlassian Data Center products could allow for arbitrary file access. Atlassian Data Center products are self-managed, enterprise-grade editions of Atlassian tools such as Jira, Confluence, Bitbucket, and Jira Service Management, which organizations host on their own infrastructure or private cloud and which offer clustering, high availability, and greater control over data, security, and scaling. Successful exploitation of this vulnerability could allow for arbitrary file access.
Read at CIS / MS-ISAC Cybersecurity Advisories
- Vendor
- Atlassian
- Product
- Confluence, Jira, Bitbucket
- Exposure class
- Collaboration, Developer platform
Why it ranks 20 (Routine)
- Product class: collaboration, developer platform
- Widely deployed vendor product (Atlassian)
- CERT coordination
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- CIS / MS-ISAC Cybersecurity Advisories (cisecurity.org)