The EditApplinkServlet resource in the Atlassian Application Links plugin before version 5.4.20, from version 6.0.0 before version 6.0.12, from version 6.1.0 before version 6.1.2, from version 7.0.0 before version 7.0.1, and from version 7.1.0 before version 7.1.3 allows remote attackers who have obtained access to administrator's session to access the EditApplinkServlet resource without needing to re-authenticate to pass "WebSudo" in products that support "WebSudo" through an improper access control vulnerability.

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 6.13.11 or 6.14.x < 7.3.3. It is, therefore, affected by an improper authorization check vulnerability allowing remote attackers with administrator privileges to edit existing applinks without passing WebSudo.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version number, the instance of Atlassian JIRA hosted on the remote web server is before 7.13.12, or 8.x before 8.5.4, or 8.6.x before 8.6.1. It is, therefore, affected by an improper authorization check related to the Atlassian Application Links plugin that allows a remote attacker with administrator privileges to edit existing applinks without passing 'WebSudo'.

ID	Name	Product	Family	Severity
112868	Atlassian Confluence 6.14.x < 7.3.3 Improper Authorization	Web App Scanning	Component Vulnerability	medium
112867	Atlassian Confluence < 6.13.11 Improper Authorization	Web App Scanning	Component Vulnerability	medium
134759	Atlassian JIRA < 7.13.12 / 8.x < 8.5.4 / 8.6.x < 8.6.1 'Atlassian Application Links' Plugin Privilege Escalation	Nessus	CGI abuses	medium

Detections

Analytics

CVE-2019-20105

medium

Tenable Plugins

medium

medium

medium