CVE-2017-9511 — Atlassian / Atlassian Fisheye and Crucible

Description (CNA)

The MultiPathResource class in Atlassian Fisheye and Crucible, before version 4.4.1 allows anonymous remote attackers to read arbitrary files via a path traversal vulnerability when Fisheye or Crucible is running on the Microsoft Windows operating system.

Affected (CNA)

Vendor / product	Versions
Atlassian / Atlassian Fisheye and Crucible	affected All versions prior to version 4.4.1

CWE

No CWE identifiers supplied.

References

https://jira.atlassian.com/browse/CRUC-8049
https://jira.atlassian.com/browse/FE-6891

ADP enrichment

CVE

No English description supplied.

https://jira.atlassian.com/browse/CRUC-8049
https://jira.atlassian.com/browse/FE-6891

CISA-ADP

No English description supplied.

No references supplied.