Directory traversal vulnerability in the Issue Collector plugin in Atlassian JIRA before 6.0.4 allows remote attackers to create arbitrary files via unspecified vectors.

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 6.0.4. It is, therefore, affected by a directory traversal in the Issue Collector component.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of JIRA installed on the remote host is earlier than 6.0.4 and is affected by a flaw in the Issue Collector plugin within 'rest/TemporaryAttachmentsResource.java' that allows traversing outside of a restricted path. The issue is due to the 'filename' POST parameter not being properly sanitized, specifically allowing path traversal style attacks (e.g. '../'). With a specially crafted request, a remote attacker can write files to arbitrary locations on the system.

According to its self-reported version number, the version of Atlassian JIRA hosted on the remote web server is prior to version 6.0.4. It is, therefore, potentially affected by an arbitrary file creation vulnerability due to a flaw in the Issue Collector plugin in which the 'filename' POST parameter is not properly sanitized, which allows traversing outside a restricted path. A remote, unauthenticated attacker, using a crafted request, can exploit this vulnerability to create files in arbitrary directories in the JIRA installation.

This vulnerability only affects JIRA installations running on the Windows OS.

Note that the Issue Collector plugin for JIRA is also affected by this vulnerability; however, Nessus did not did confirm that this plugin is installed.

ID	Name	Product	Family	Severity
113816	Atlassian Jira < 6.0.4 Directory Traversal In Issue Collector	Web App Scanning	Component Vulnerability	high
9731	Atlassian JIRA 6.0.x < 6.0.4 Directory Traversal	Nessus Network Monitor	CGI	low
73272	Atlassian JIRA < 6.0.4 Arbitrary File Creation	Nessus	CGI abuses	medium

Detections

Analytics

CVE-2014-2314

high

Tenable Plugins

high

low

medium