CVE-2017-18101: Medium severity atlassian jira vulnerability
Various administrative external system import resources in Atlassian JIRA Server (including JIRA Core) before version 7.6.5, from version 7.7.0 before version 7.7.3, from version 7.8.0 before version 7.8.3 and before version 7.9.0 allow remote attackers to run import operations and to determine if an internal service exists through missing permission checks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-18101?
CVE-2017-18101 has a medium severity rating, allowing unauthorized remote import operations.
How do I fix CVE-2017-18101?
To fix CVE-2017-18101, upgrade Atlassian JIRA to version 7.6.5 or any later versions above 7.7.3, 7.8.3, or 7.9.0.
What versions of Atlassian JIRA are affected by CVE-2017-18101?
CVE-2017-18101 affects versions of Atlassian JIRA before 7.6.5, 7.7.0 to 7.7.3, 7.8.0 to 7.8.3, and all versions prior to 7.9.0.
Can CVE-2017-18101 allow data exposure?
Yes, CVE-2017-18101 could allow attackers to determine if certain import operations can be executed, potentially exposing sensitive data.
What impact does CVE-2017-18101 have on system security?
CVE-2017-18101 poses a risk to system security by enabling unauthorized users to perform import operations, which may lead to further exploitation.