CVE-2020-36233: High severity Atlassian Bitbucket vulnerability
Published Feb 18, 2021
·Updated
The Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before version 6.10.9, 7.x before 7.6.4, and from version 7.7.0 before 7.10.1 allows local attackers to escalate privileges because of weak permissions on the installation directory.
Affected Software
4 affected components
Atlassian Bitbucket<6.10.9
Atlassian Bitbucket>=7.0.0<7.6.4
Atlassian Bitbucket>=7.7.0<7.10.1
Microsoft Windows
Event History
Feb 18, 2021
CVE Published
via MITRE·03:16 PM
Data Sourced
via MITRE·03:16 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2020-36233?
CVE-2020-36233 is a vulnerability in the Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center.
2
What is the severity of CVE-2020-36233?
CVE-2020-36233 has a severity rating of 7.8 (high).
3
How does CVE-2020-36233 allow local attackers to escalate privileges?
CVE-2020-36233 allows local attackers to escalate privileges due to weak permissions on the installation directory.
4
Which versions of Atlassian Bitbucket are affected by CVE-2020-36233?
Atlassian Bitbucket versions 6.10.9, 7.x before 7.6.4, and from 7.7.0 before 7.10.1 are affected by CVE-2020-36233.
5
Are all versions of Microsoft Windows vulnerable to CVE-2020-36233?
No, Microsoft Windows is not vulnerable to CVE-2020-36233.