CVE-2015-8399: Infoleak
Atlassian Confluence before 5.8.17 allows remote authenticated users to read configuration files via the decoratorName parameter to (1) spaces/viewdefaultdecorator.action or (2) admin/viewdefaultdecorator.action.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Atlassian Confluenceto a version that resolves this vulnerability.Fixed in 5.8.17
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8399?
CVE-2015-8399 is classified as a medium severity vulnerability due to its ability to expose sensitive configuration files.
How do I fix CVE-2015-8399?
To fix CVE-2015-8399, upgrade Atlassian Confluence to version 5.8.17 or higher.
What type of vulnerability is CVE-2015-8399?
CVE-2015-8399 is a security vulnerability that allows remote authenticated users to read configuration files.
Which versions of Atlassian Confluence are affected by CVE-2015-8399?
Atlassian Confluence versions prior to 5.8.17 are affected by CVE-2015-8399.
What can attackers do with CVE-2015-8399?
Attackers can exploit CVE-2015-8399 to access sensitive configuration files, potentially compromising system integrity.