CVE-2017-9512 — Atlassian / Atlassian Fisheye and Crucible

CVE-2017-9512

Atlassian / Atlassian Fisheye and Crucible PUBLISHED

Description (CNA)

The mostActiveCommitters.do resource in Atlassian Fisheye and Crucible, before version 4.4.1 allows anonymous remote attackers to access sensitive information, for example email addresses of committers, as it lacked permission checks.

Affected (CNA)

Vendor / product	Versions
Atlassian / Atlassian Fisheye and Crucible	affected All versions prior to version 4.4.1

CWE

No CWE identifiers supplied.

References

https://jira.atlassian.com/browse/CRUC-8053
https://jira.atlassian.com/browse/FE-6892

ADP enrichment

CVE

No English description supplied.

https://jira.atlassian.com/browse/CRUC-8053
https://jira.atlassian.com/browse/FE-6892

CISA-ADP

No English description supplied.

No references supplied.