Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveAtlassianCVE-2019-15006
HistoryDec 19, 2019 - 1:15 a.m.

CVE-2019-15006

2019-12-1901:15:10
CWE-913
atlassian
web.nvd.nist.gov
108
cve
2019
15006
confluence
server
data center
man-in-the-middle
mitm
vulnerability
atlassian
companion
application
dns
resolution
certificate
revocation
attack

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N

AI Score

6.2

Confidence

High

EPSS

0.002

Percentile

61.0%

JSON

There was a man-in-the-middle (MITM) vulnerability present in the Confluence Previews plugin in Confluence Server and Confluence Data Center. This plugin was used to facilitate communication with the Atlassian Companion application. The Confluence Previews plugin in Confluence Server and Confluence Data Center communicated with the Companion application via the atlassian-domain-for-localhost-connections-only.com domain name, the DNS A record of which points at 127.0.0.1. Additionally, a signed certificate for the domain was publicly distributed with the Companion application. An attacker in the position to control DNS resolution of their victim could carry out a man-in-the-middle (MITM) attack between Confluence Server (or Confluence Data Center) and the atlassian-domain-for-localhost-connections-only.com domain intended to be used with the Companion application. This certificate has been revoked, however, usage of the atlassian-domain-for-localhost-connections-only.com domain name was still present in Confluence Server and Confluence Data Center. An attacker could perform the described attack by denying their victim access to certificate revocation information, and carry out a man-in-the-middle (MITM) attack to observe files being edited using the Companion application and/or modify them, and access some limited user information.

Affected configurations

Nvd
Node
atlassianconfluenceRange6.11.0–6.13.10
OR
atlassianconfluence_serverRange6.14.0–6.15.10
OR
atlassianconfluence_serverRange7.0.1–7.0.5
OR
atlassianconfluence_serverRange7.1.0–7.1.2
VendorProductVersionCPE
atlassianconfluence*cpe:2.3:a:atlassian:confluence:*:*:*:*:*:*:*:*
atlassianconfluence_server*cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "Confluence Server",
    "vendor": "Atlassian",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "6.11.0",
        "versionType": "custom"
      },
      {
        "lessThan": "6.13.10",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "6.14.0",
        "versionType": "custom"
      },
      {
        "lessThan": "6.15.10",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "7.0.1",
        "versionType": "custom"
      },
      {
        "lessThan": "7.0.5",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "7.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "7.1.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "7.2.0-beta1",
        "versionType": "custom"
      },
      {
        "lessThan": "7.2.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Related

nvd 1
cvelist 1
symantec 1
atlassian 2
prion 1
nvd
nvd
CVE-2019-15006
2019-12-19 01:15:10
cvelist
cvelist
CVE-2019-15006
2019-12-19 00:50:12
symantec
symantec
Atlassian Companion CVE-2019-15006 Security Bypass Vulnerability
2019-12-05 00:00:00
atlassian
atlassian
Confluence Server and Data Center - Atlassian Companion Man-in-the-Middle - CVE-2019-15006
2019-12-11 04:01:52
Confluence Server and Data Center - Atlassian Companion Man-in-the-Middle - CVE-2019-15006
2019-12-11 04:01:52
prion
prion
Information disclosure
2019-12-19 01:15:00

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N

AI Score

6.2

Confidence

High

EPSS

0.002

Percentile

61.0%

JSON
Related for CVE-2019-15006
nvd1cvelist1symantec1atlassian2prion1