NVD

Id
87096  
Name
CVE-2017-9505  
Description
Atlassian Confluence starting with 4.3.0 before 6.2.1 did not check if a user had permission to view a page when creating a workbox notification about new comments. An attacker who can login to Confluence could receive workbox notifications, which contain the content of comments, for comments added to a page after they started watching it even if they do not have permission to view the page itself.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-07-18  
Published
2017-06-15  
Modified Date
2017-07-03  
Seq
2017-9505  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
421684 87096 CVE-2017-5913 https://medium.com/@chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f  View
421685 87096 CVE-2017-5913 https://medium.com/@chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f  View
426169 87096 CVE-2017-0260 98810  View
426170 87096 CVE-2017-0260 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0260  View
426171 87096 CVE-2017-0260 98810  View
426172 87096 CVE-2017-0260 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0260  View
426173 87096 CVE-2017-0260 98810  View
426174 87096 CVE-2017-0260 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0260  View

Related JVN