Lucene search

AtlassianCVE-2021-26073

HistoryApr 16, 2021 - 3:15 a.m.

CVE-2021-26073

2021-04-1603:15:12

CWE-287

atlassian

web.nvd.nist.gov

cve-2021-26073

broken authentication

atlassian connect express

ace

node.js

security vulnerability

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

7.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

29.8%

JSON

Broken Authentication in Atlassian Connect Express (ACE) from version 3.0.2 before version 6.6.0: Atlassian Connect Express is a Node.js package for building Atlassian Connect apps. Authentication between Atlassian products and the Atlassian Connect Express app occurs with a server-to-server JWT or a context JWT. Atlassian Connect Express versions from 3.0.2 before 6.6.0 erroneously accept context JWTs in lifecycle endpoints (such as installation) where only server-to-server JWTs should be accepted, permitting an attacker to send authenticated re-installation events to an app.

Affected configurations

Nvd

Node

atlassianconnect_expressRange3.0.2–6.6.0node.js

VendorProductVersionCPE
atlassianconnect_express*cpe:2.3:a:atlassian:connect_express:*:*:*:*:*:node.js:*:*

Vendor	Product	Version	CPE
atlassian	connect_express	*	cpe:2.3:a:atlassian:connect_express::::::node.js::*

CNA Affected

[
  {
    "product": "Atlassian Connect Express (ACE)",
    "vendor": "Atlassian",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "3.0.2",
        "versionType": "custom"
      },
      {
        "lessThan": "6.6.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

community.developer.atlassian.com/t/action-required-atlassian-connect-vulnerability-a%5B%E2%80%A6%5Dypass-of-app-qsh-verification-via-context-jwts/47072

confluence.atlassian.com/pages/viewpage.action?pageId=1051986099

security.netapp.com/advisory/ntap-20210604-0004/

Social References

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

7.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

29.8%

JSON

Related for CVE-2021-26073