NVD

Id
39639  
Name
CVE-2013-3926  
Description
** DISPUTED ** Atlassian Crowd 2.6.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to a "symmetric backdoor." NOTE: as of 20130704, the vendor could not reproduce the issue, stating "We"ve been unable to substantiate the existence of [CVE-2013-3926]. The author of the article has not contacted Atlassian and has provided no detail, making it difficult to validate the claim... If we can confirm that there is a vulnerability, a patch will be issued."  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-07-01  
Modified Date
2013-10-04  
Seq
2013-3926  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
201779 39639 CVE-2013-3926 http://it.slashdot.org/story/13/07/01/0011217/backdoor-discovered-in-atlassian-crowd  View
201780 39639 CVE-2013-3926 http://www.commandfive.com/papers/C5_TA_2013_3925_AtlassianCrowd.pdf  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21603 JVNDB-2013-003178 Atlassian Crowd における任意のコマンドを実行される脆弱性 ** 未確定 ** 本件は、脆弱性として確定していません。 CVE-2013-3926 63868 CVE-2013-3926 39639 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003178.html 2013-06-30 2013-07-10 View