CVE-2017-7415: Infoleak
Published Apr 27, 2017
·Updated
Atlassian Confluence 6.x before 6.0.7 allows remote attackers to bypass authentication and read any blog or page via the drafts diff REST resource.
Affected Software
7 affected components
Atlassian Confluence Server=6.0.0
Atlassian Confluence Server=6.0.1
Atlassian Confluence Server=6.0.2
Atlassian Confluence Server=6.0.3
Atlassian Confluence Server=6.0.4
Atlassian Confluence Server=6.0.5
Atlassian Confluence Server=6.0.6
Event History
Apr 27, 2017
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-7415?
CVE-2017-7415 has a high severity rating due to its potential for unauthorized access to sensitive information.
2
How can I fix CVE-2017-7415?
To resolve CVE-2017-7415, upgrade Atlassian Confluence to version 6.0.7 or later.
3
What versions of Atlassian Confluence are affected by CVE-2017-7415?
CVE-2017-7415 affects Atlassian Confluence versions 6.0.0 to 6.0.6.
4
Can CVE-2017-7415 lead to data breaches?
Yes, CVE-2017-7415 allows remote attackers to read blogs or pages, potentially leading to data breaches.
5
Is there a workaround for CVE-2017-7415?
Currently, there is no official workaround for CVE-2017-7415 other than upgrading to a fixed version.