CVE-2017-18035CWE-284

The /rest/review-coverage-chart/1.0/data/<repository_name>/.json resource in Atlassian Fisheye and Crucible before version 4.5.1 and 4.6.0 was missing a…

published February 2, 2018

CVSS
—
EPSS
1%
Percentile
55.5
In the wild
Unconfirmed
What it is

The /rest/review-coverage-chart/1.0/data/<repository_name>/.json resource in Atlassian Fisheye and Crucible before version 4.5.1 and 4.6.0 was missing a permissions check, this allows remote attackers who do not have access to a particular repository to determine its existence and access review coverage statistics for it.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00788 · 55.5th percentile
Weakness
CWE-284 · Improper Access Control
Published
2018-02-02T14:00Z
EPSS history
Timeline
  • 02 FEB 14:00Z
    The /rest/review-coverage-chart/1.0/data/<repository_name>/.json resource in Atlassian Fisheye and Crucible before version 4.5.1 and 4.6.0 was missing a…
    cvelistv5