NVD

Id
84716  
Name
CVE-2017-5983  
Description
The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, which allows remote attackers to execute arbitrary code, read arbitrary files, or cause a denial of service via a crafted serialized Java object.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-04-27  
Published
2017-04-10  
Modified Date
2017-04-14  
Seq
2017-5983  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
414093 84716 CVE-2017-5899 [oss-security] 20170127 CVE Request: s-nail local root  View
414094 84716 CVE-2017-5899 [oss-security] 20170207 Re: CVE Request: s-nail local root  View
414095 84716 CVE-2017-5899 96138  View
414096 84716 CVE-2017-5899 [s-nail-users] 20170127 [ANN]ounce of S-nail v14.8.16 ("Copris lunaris")  View
414097 84716 CVE-2017-5899 [oss-security] 20170127 CVE Request: s-nail local root  View
414098 84716 CVE-2017-5899 [oss-security] 20170207 Re: CVE Request: s-nail local root  View
414099 84716 CVE-2017-5899 96138  View
414100 84716 CVE-2017-5899 [s-nail-users] 20170127 [ANN]ounce of S-nail v14.8.16 ("Copris lunaris")  View
414101 84716 CVE-2017-5899 [oss-security] 20170127 CVE Request: s-nail local root  View
414102 84716 CVE-2017-5899 [oss-security] 20170207 Re: CVE Request: s-nail local root  View
414103 84716 CVE-2017-5899 96138  View
414104 84716 CVE-2017-5899 [s-nail-users] 20170127 [ANN]ounce of S-nail v14.8.16 ("Copris lunaris")  View
417551 84716 CVE-2017-2490 97301  View
417552 84716 CVE-2017-2490 https://support.apple.com/HT207601  View
417553 84716 CVE-2017-2490 https://support.apple.com/HT207602  View
417554 84716 CVE-2017-2490 https://support.apple.com/HT207615  View
417555 84716 CVE-2017-2490 https://support.apple.com/HT207617  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
66753 JVNDB-2017-003078 Atlassian JIRA サーバの JIRA Workflow Designer Plugin における任意のコードを実行される脆弱性 Atlassian JIRA サーバの JIRA Workflow Designer Plugin は、XML パーサおよびデシリアライザを適切に使用しないため、任意のコードを実行される、任意のファイルを読まれる、またはサービス運用妨害 (DoS) 状態にされる脆弱性が存在します。 CVE-2017-5983 0 CVE-2017-5983 84716 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-003078.html 2017-03-09 2017-05-12 View