Vulnerability Details CVE-2017-7415
Atlassian Confluence 6.x before 6.0.7 allows remote attackers to bypass authentication and read any blog or page via the drafts diff REST resource.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 77.0%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://www.securityfocus.com/bid/97961
- https://jira.atlassian.com/browse/CONFSERVER-52222
- https://packetstormsecurity.com/files/142330/Confluence-6.0.x-Information-Disclosure.html
- http://www.securityfocus.com/bid/97961
- https://jira.atlassian.com/browse/CONFSERVER-52222
- https://packetstormsecurity.com/files/142330/Confluence-6.0.x-Information-Disclosure.html
Products affected by CVE-2017-7415
-
cpe:2.3:a:atlassian:confluence_server:6.0.0
-
cpe:2.3:a:atlassian:confluence_server:6.0.1
-
cpe:2.3:a:atlassian:confluence_server:6.0.2
-
cpe:2.3:a:atlassian:confluence_server:6.0.3
-
cpe:2.3:a:atlassian:confluence_server:6.0.4
-
cpe:2.3:a:atlassian:confluence_server:6.0.5
-
cpe:2.3:a:atlassian:confluence_server:6.0.6