Detections
Analytics
Atlassian JIRA 6.x < 6.3 Multiple Vulnerabilities
critical Nessus Network Monitor Plugin ID 700002
Synopsis
The remote web server hosts an application that is vulnerable to multiple attack vectors.Description
The version of JIRA installed on the remote host is earlier than 6.3 and is affected by multiple vulnerabilities :- An unspecified flaw exists in the XML Parser and Deserializer that may allow a remote attacker to potentially execute arbitrary code. No further details have been provided.
- An unspecified flaw exists in the XML Parser and Deserializer that may allow a remote attacker to cause a denial of service. No further details have been provided.
- An unspecified flaw exists in the XML Parser and Deserializer that may allow a remote attacker to gain access to potentially sensitive information. No further details have been provided.
Solution
Update to JIRA version 6.3 or later.See Also
Plugin Details
Severity: Critical
ID: 700002
Family: CGI
Published: 3/14/2017
Updated: 3/6/2019
Vulnerability Information
CPE: cpe:/a:atlassian:jira
Patch Publication Date: 7/8/2014
Vulnerability Publication Date: 3/9/2017