7.5
CVE-2017-7415
- EPSS 4.35%
- Veröffentlicht 27.04.2017 10:59:00
- Zuletzt bearbeitet 13.05.2026 00:24:29
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginAtlassian Confluence 6.x before 6.0.7 allows remote attackers to bypass authentication and read any blog or page via the drafts diff REST resource.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Atlassian ≫ Confluence Server Version6.0.0
Atlassian ≫ Confluence Server Version6.0.1
Atlassian ≫ Confluence Server Version6.0.2
Atlassian ≫ Confluence Server Version6.0.3
Atlassian ≫ Confluence Server Version6.0.4
Atlassian ≫ Confluence Server Version6.0.5
Atlassian ≫ Confluence Server Version6.0.6
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 4.35% | 0.9 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
http://www.securityfocus.com/bid/97961
https://jira.atlassian.com/browse/CONFSERVER-52222
https://packetstormsecurity.com/files/142330/Confluence-6.0.x-Information-Disclosure.html