CVE-2007-6619
published 2008-01-03CVE-2007-6619: The Setup Wizard in Atlassian JIRA Enterprise Edition before 3.12.1 does not properly restrict setup attempts after setup is complete, which allows remote…
PriorityP433high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.36%
68.5th percentile
The Setup Wizard in Atlassian JIRA Enterprise Edition before 3.12.1 does not properly restrict setup attempts after setup is complete, which allows remote attackers to change the default language.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| atlassian | jira | <= 3.12 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2007-12-24http://osvdb.org/42770http://secunia.com/advisories/27954http://www.securityfocus.com/bid/27095http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2007-12-24http://osvdb.org/42770http://secunia.com/advisories/27954http://www.securityfocus.com/bid/27095
2008-01-03
Published