CVE-2018-13399

The Microsoft Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows local attackers to escalate privileges because of weak permissions on the installation directory.

Score

CVSS 3.0 7.8 High

Status

Modified - security@atlassian.com

Published

2018-10-16

Last modified

2024-09-16

Weaknesses

CWE-732

Affected products

• Crucible (Atlassian)
• Fisheye (Atlassian)
• Fisheye And Crucible (Atlassian)

References

• https://jira.atlassian.com/browse/CRUC-8314
• https://jira.atlassian.com/browse/FE-7105