CVE-2017-5983

18Vexday Risk Score

Corrige pronto. Ella tiene exploit funcional público.

ssvc Attendepss 7.5%

probabilidad de explotación

7.5%top 6% de las CVE

explotación observada

noninguna fuente lo reporta

The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, which allows remote attackers to execute arbitrary code, read arbitrary files, or cause a denial of service via a crafted serialized Java object.

Productos afectados

n/a · n/a

Referencias

http://codewhitesec.blogspot.com/2017/04/amf.html https://confluence.atlassian.com/jira063/jira-security-advisory-2017-03-09-875604401.html https://jira.atlassian.com/browse/JRASERVER-64077 https://www.kb.cert.org/vuls/id/307983 http://www.securityfocus.com/bid/97379