« Volver al listado

CVE-2017-18087

Estado: ModificadaAlta (7.5)—

The download commit resource in Atlassian Bitbucket Server from version 5.1.0 before version 5.1.7, from version 5.2.0 before version 5.2.5, from version 5.3.0 before version 5.3.3 and from version 5.4.0 before version 5.4.1 allows remote attackers to write files to disk potentially allowing them to gain code execution, exploit CVE-2017-1000117 if a vulnerable version of git is in use, and or determine if an internal service exists via an argument injection vulnerability in the at parameter.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Atlassian — Bitbucket

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2017-18087",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.6
      }
    ]
  },
  "affected": [
    {
      "source": "security@atlassian.com",
      "affectedData": [
        {
          "vendor": "Atlassian",
          "product": "Bitbucket Server",
          "versions": [
            {
              "status": "affected",
              "version": "from 5.1.0 prior to 5.1.7"
            },
            {
              "status": "affected",
              "version": "from 5.2.0 prior to 5.2.5"
            },
            {
              "status": "affected",
              "version": "from 5.3.0 prior to 5.3.3"
            },
            {
              "status": "affected",
              "version": "from 5.4.0 prior to 5.4.1"
            }
          ]
        }
      ]
    }
  ],
  "published": "2018-02-15T13:29:00.250",
  "references": [
    {
      "url": "http://www.securityfocus.com/bid/103038",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "security@atlassian.com"
    },
    {
      "url": "https://jira.atlassian.com/browse/BSERV-10593",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security@atlassian.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/103038",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://jira.atlassian.com/browse/BSERV-10593",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The download commit resource in Atlassian Bitbucket Server from version 5.1.0 before version 5.1.7, from version 5.2.0 before version 5.2.5, from version 5.3.0 before version 5.3.3 and from version 5.4.0 before version 5.4.1 allows remote attackers to write files to disk potentially allowing them to gain code execution, exploit CVE-2017-1000117 if a vulnerable version of git is in use, and or determine if an internal service exists via an argument injection vulnerability in the at parameter."
    },
    {
      "lang": "es",
      "value": "El recurso download commit en Atlassian Bitbucket Server, desde la versión 5.1.0 anterior a la versión 5.1.7, desde la versión 5.2.0 anterior a la versión 5.2.5, desde la versión 5.3.0 anterior a la versión 5.3.3 y desde la versión 5.4.0 anterior a la versión 5.4.1, permite que atacantes remotos escriban archivos en el disco, permitiéndoles que puedan ejecutar código, explotar CVE-2017-1000117 si se está empleando una versión vulnerable de git o para determinar si existe un servicio interno por medio de una vulnerabilidad de inyección de argumentos en el parámetro at."
    }
  ],
  "lastModified": "2026-06-17T01:12:10.880",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8016084B-D350-4BEB-8DF5-8535B0731E4C",
              "versionEndExcluding": "5.1.7",
              "versionStartIncluding": "5.1.0"
            },
            {
              "criteria": "cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CD7D36AD-BC10-4E62-8425-E192FE08404D",
              "versionEndExcluding": "5.2.5",
              "versionStartIncluding": "5.2.0"
            },
            {
              "criteria": "cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5DE43F75-BEBE-4F4F-A913-6FE0B8EF0FE3",
              "versionEndExcluding": "5.3.3",
              "versionStartIncluding": "5.3.0"
            },
            {
              "criteria": "cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F191B55F-E311-4B7C-90CA-0089D2044E6A",
              "versionEndExcluding": "5.4.1",
              "versionStartExcluding": "5.4.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@atlassian.com"
}