CVE-2018-13400: Medium severity Atlassian Jira vulnerability
Several administrative resources in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3, from version 7.10.0 before version 7.10.3, from version 7.11.0 before version 7.11.3, from version 7.12.0 before version 7.12.3, and before version 7.13.1 allow remote attackers who have obtained access to administrator's session to access certain administrative resources without needing to re-authenticate to pass "WebSudo" through an improper access control vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-13400?
CVE-2018-13400 is classified as a moderate severity vulnerability due to unauthorized access to administrative resources.
How do I fix CVE-2018-13400?
To fix CVE-2018-13400, upgrade Atlassian Jira to versions 7.6.9 or above, or to later versions specified in the advisory.
What versions of Jira are affected by CVE-2018-13400?
CVE-2018-13400 affects Jira versions before 7.6.9 and Jira Server versions between 7.7.0 and 7.7.5, 7.8.0 and 7.8.5, 7.9.0 and 7.9.3, 7.10.0 and 7.10.3, 7.11.0 and 7.11.3, 7.12.0 and 7.12.3, and 7.13.0 and 7.13.1.
What type of vulnerability is CVE-2018-13400?
CVE-2018-13400 is a privilege escalation vulnerability that allows unauthorized users to gain access to administrative features.
Is there a workaround for CVE-2018-13400?
Currently, the recommended action is to upgrade to a secure version, as no specific workaround has been detailed for CVE-2018-13400.