CVE-2010-1165explotación observada

CVE-2010-1165

Publicada el · Actualizada el

25Vexday Risk Score

Prioriza la corrección. Ella explotación observada por VulnCheck.

ssvc Attendepss 4.4%
de la publicación al arma
Publicada en NVD20 abr
VulnCheck20 abr
probabilidad de explotación
4.4%top 9% de las CVE
explotación observada
síVulnCheck
Atlassian JIRA 3.12 through 4.1 allows remote authenticated administrators to execute arbitrary code by modifying the (1) attachment (aka attachments), (2) index (aka indexing), or (3) backup path and then uploading a file, as exploited in the wild in April 2010.
Productos afectados
n/a · n/a
Referencias
http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2010-04-16http://jira.atlassian.com/browse/JRA-20995http://jira.atlassian.com/browse/JRA-21004http://secunia.com/advisories/39353https://exchange.xforce.ibmcloud.com/vulnerabilities/57828http://www.openwall.com/lists/oss-security/2010/04/16/3http://www.openwall.com/lists/oss-security/2010/04/16/4http://www.securityfocus.com/bid/39485