CVE-2010-1165exploração observada

CVE-2010-1165

Publicada em · Atualizada em

25Vexday Risk Score

Priorize a correção. Ela exploração observada pelo VulnCheck.

ssvc Attendepss 4.4%
da publicação à arma
Publicada no NVD20 de abr.
VulnCheck20 de abr.
probabilidade de exploração
4.4%top 9% das CVEs
exploração observada
simVulnCheck
Atlassian JIRA 3.12 through 4.1 allows remote authenticated administrators to execute arbitrary code by modifying the (1) attachment (aka attachments), (2) index (aka indexing), or (3) backup path and then uploading a file, as exploited in the wild in April 2010.
Produtos afetados
n/a · n/a
Referências
http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2010-04-16http://jira.atlassian.com/browse/JRA-20995http://jira.atlassian.com/browse/JRA-21004http://secunia.com/advisories/39353https://exchange.xforce.ibmcloud.com/vulnerabilities/57828http://www.openwall.com/lists/oss-security/2010/04/16/3http://www.openwall.com/lists/oss-security/2010/04/16/4http://www.securityfocus.com/bid/39485