CVE-2017-5983

EPSS 16.2%

Vexday Risk Score

23Bajo

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

Madurez del exploit

Exploit funcional

Exploit automatizable disponible (Nuclei/Metasploit).

CVSS —EPSS 16.2%KEV nãoPoC —Nuclei simMetasploit —Patch —

Ciclo de vida

10 abr 2017Publicada en NVD

Recomendación: Planificar corrección próxima — ya existe PoC pública.

The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, which allows remote attackers to execute arbitrary code, read arbitrary files, or cause a denial of service via a crafted serialized Java object.

Productos afectados

n/a · n/a

Referencias

http://codewhitesec.blogspot.com/2017/04/amf.html https://confluence.atlassian.com/jira063/jira-security-advisory-2017-03-09-875604401.html https://jira.atlassian.com/browse/JRASERVER-64077 https://www.kb.cert.org/vuls/id/307983 http://www.securityfocus.com/bid/97379