CVE Catalog

CVE-2017-7415

High
Published: Translated: NVD NIST

Summary

Atlassian Confluence 6.x before 6.0.7 allows remote attackers to bypass authentication and read any blog or page via the drafts diff REST resource.

Risk Assessment

Organizations may be exposed to unauthorized access to sensitive information, potentially leading to data leaks.

Recommendation

It is recommended to upgrade Atlassian Confluence to version 6.0.7 or later to mitigate this vulnerability.

Other vulnerabilities in Atlassian Confluence

Original NVD description (English source)

Atlassian Confluence 6.x before 6.0.7 allows remote attackers to bypass authentication and read any blog or page via the drafts diff REST resource.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS