CVE-2020-4019

published 2020-06-01

CVE-2020-4019: The file editing functionality in the Atlassian Companion App before version 1.0.0 allows local attackers to have the app run a different executable in place…

high 7.8 CVSS 3.1

AV L AC L PR N UI R S U C H I H A H

The file editing functionality in the Atlassian Companion App before version 1.0.0 allows local attackers to have the app run a different executable in place of the app's cmd.exe via a untrusted search path vulnerability.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
atlassian	companion	< 1.0.0	1.0.0
atlassian	companion_app	>= unspecified < 1.0.0	1.0.0

CWE-426