CVE-2021-43958criticalCWE-307

CVE-2021-43958: falha crítica em Atlassian Fisheye

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Crucible+ Monitorar Fisheye

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 1.5%
Various rest resources in Fisheye and Crucible before version 4.8.9 allowed remote attackers to brute force user login credentials as rest resources did not check if users were beyond their max failed login limits and therefore required solving a CAPTCHA in addition to providing user credentials for authentication via a improper restriction of excess authentication attempts vulnerability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Atlassian · CrucibleAtlassian · Fisheye
CVEs relacionadas — Atlassian Fisheye

No mesmo produto, das mais perigosas para as menos.

CVE-2022-26136CRITICALCVE-2022-26136EPSS 5.7%CVE-2022-26137HIGHCVE-2022-26137EPSS 2.4%CVE-2019-15005—CVE-2019-15005EPSS 1.3%CVE-2021-43957HIGHCVE-2021-43957EPSS 1.3%CVE-2020-4017—CVE-2020-4017EPSS 1.2%CVE-2020-4016—CVE-2020-4016EPSS 1.2%