CVE-2017-9513CWE-284

Several rest inline action resources of Atlassian Activity Streams before version 6.3.0 allows remote authenticated attackers to watch any Confluence page &…

published January 29, 2018

CVSS
—
EPSS
1%
Percentile
50.5
In the wild
Unconfirmed
What it is

Several rest inline action resources of Atlassian Activity Streams before version 6.3.0 allows remote authenticated attackers to watch any Confluence page & receive notifications when comments are added to the watched page, and vote & watch JIRA issues that they do not have access to, although they will not receive notifications for the issue, via missing permission checks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00656 · 50.5th percentile
Weakness
CWE-284 · Improper Access Control
Published
2018-01-29T19:00Z
EPSS history
Timeline
  • 29 JAN 19:00Z
    Several rest inline action resources of Atlassian Activity Streams before version 6.3.0 allows remote authenticated attackers to watch any Confluence page &…
    cvelistv5