NVD

Id
12698  
Name
CVE-2010-1165  
Description
Atlassian JIRA 3.12 through 4.1 allows remote authenticated administrators to execute arbitrary code by modifying the (1) attachment (aka attachments), (2) index (aka indexing), or (3) backup path and then uploading a file, as exploited in the wild in April 2010.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-04-20  
Modified Date
2010-04-29  
Seq
2010-1165  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
69781 12698 CVE-2010-1165 http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2010-04-16  View
69782 12698 CVE-2010-1165 http://jira.atlassian.com/browse/JRA-20995  View
69783 12698 CVE-2010-1165 http://jira.atlassian.com/browse/JRA-21004  View
69784 12698 CVE-2010-1165 [oss-security] 20100416 CVE Request: JIRA Issues  View
69785 12698 CVE-2010-1165 [oss-security] 20100416 Re: CVE Request: JIRA Issues  View
69786 12698 CVE-2010-1165 39485  View
69787 12698 CVE-2010-1165 jira-pathsettings-priv-escalation(57828)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38159 JVNDB-2010-003944 Atlassian JIRA における任意のコードを実行される脆弱性 Atlassian JIRA には、任意のコードを実行される脆弱性が存在します。 CVE-2010-1165 43745 CVE-2010-1165 12698 9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003944.html 2010-04-13 2012-06-26 View