CVE-2017-7415

Atlassian Confluence 6.x before 6.0.7 allows remote attackers to bypass authentication and read any blog or page via the drafts diff REST resource.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-04-27

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Confluence Server (Atlassian)

References

• http://www.securityfocus.com/bid/97961
• https://jira.atlassian.com/browse/CONFSERVER-52222
• https://packetstormsecurity.com/files/142330/Confluence-6.0.x-Information-Disclosure.html