The Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an unprivileged user to initiate periodic log scans and send the results to a user-specified email address due to a missing authorization check. The email message may contain configuration information about the application that the plugin is installed into. A vulnerable version of the plugin is included with Bitbucket Server / Data Center before 6.6.0, Confluence Server / Data Center before 7.0.1, Jira Server / Data Center before 8.3.2, Crowd / Crowd Data Center before 3.6.0, Fisheye before 4.7.2, Crucible before 4.7.2, and Bamboo before 6.10.2.

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to version 8.3.2 It is, therefore, shipped with a vulnerable version of the Atlassian Troubleshooting and Support plugin (ATST), which permitted unprivileged users to initialte log scans and send the results to a user-specified email address due to a missing authorization check. The email message may contain configuration information about the application that the plugin is installed into.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version number, the Atlassian Crowd application running on the remote host is prior to version 3.6.0. It is, therefore, shipped with a vulnerable version of the Atlassian Troubleshooting and Support plugin (ATST), which permitted unprivileged users to initialte log scans and send the results to a user-specified email address due to a missing authorization check. The email message may contain configuration information about the application that the plugin is installed into.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 7.0.1. It is, therefore, affected by a missing authorization check vulnerability in the Atlassian Troubleshooting and Support Tools (ATST) plugin prior to version 1.17.2 which was bundled in Confluence Server & Confluence Data Center allowing an unprivileged user to initiate periodic log scans and send the results to a user-specified email address.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version number, The version of Atlassian JIRA hosted on the remote web server is 7.6 < 8.3.2. It is therefore affected by the following vulnerabilities:

  - An incorrect authorization check on the /rest/issueNav/1/issueTable resource     in Jira allows remote attackers to enumerate usernames. (CVE-2019-8446)

  - A cross-site request forgery (XSRF) vulnerability exists in Jira due to     ServiceExecutor. A remote attacker can exploit this to trigger the creation     of export files. (CVE-2019-8447)

  - A cross-site scripting (XSS) vulnerability exists due to improper validation of priority     icon url of issue priority. An unauthenticated, remote attacker can exploit this,     by convincing a user to click a specially crafted URL, to execute arbitrary script code     in a user's browser session. (CVE-2019-11584)   
  - An information disclosure vulnerability exists in the Atlassian     Troubleshooting and Support Tools plugin due to a missing     authorization check. An authenticated, remote attacker     can exploit this to initiate periodic log scans and send the     results to a user-specified email address disclosing configuration     information.(CVE-2019-15005)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
113824	Atlassian Jira < 8.3.2 Improper Authorization Via ATST Plugin	Web App Scanning	Component Vulnerability	medium
113725	Atlassian Crowd < 3.6.0 Improper Authorization Via ATST Plugin	Web App Scanning	Component Vulnerability	medium
112875	Atlassian Confluence < 7.0.1 Improper Authorization	Web App Scanning	Component Vulnerability	medium
129589	Atlassian JIRA < 8.3.2 Multiple Vulnerabilities	Nessus	CGI abuses	medium

Detections

Analytics

CVE-2019-15005

medium

Tenable Plugins

medium

medium

medium

medium