Atlassian publikuje poprawki do swoich produktów 06/24 (P24-206)

cert.pse-online.pl 6 miesięcy temu

18 czerwca 2024 r. firma Atlassian opublikowała porady dotyczące bezpieczeństwa dotyczące luk w zabezpieczeniach następujących produktów:

• Confluence Data Center i serwer – wiele wersji

• Rybie oko/Tygiel – wiele wersji

• Jira Data Center i Server – wiele wersji

• Data Center i Server Jira Service Management – wiele wersji

Produkt	Wersja podatna	Aktualizacja	Link	CVE ID	CVSS
Confluence Data Center and Server	8.9.0 do 8.9.2 8.8.0 do 8.8.1 8.7.1 do 8.7.2 8.6.0 do 8.6.2 8.5.0 do 8.5.10 (LTS) 8.4.0 do 8.4.5 8.3.0 do 8.3.4 8.2.0 do 8.2.3 8.1.0 do 8.1.4 8.0.0 do 8.0.4 7.20.0 do 7.20.3 7.19.0 do 7.19.23 (LTS)	8.9.3 Data Center Only 8.5.11 (LTS) rekomendacja 7.19.24 (LTS)	Improper Authorization org.springframework.security:spring-security-core Dependency in Confluence Data Center and Server	CVE-2024-22257	8.2
			SSRF (Server-Side Request Forgery) org.springframework:spring-web Dependency in Confluence Data Center and Server	CVE-2024-22243	8.1
			SSRF (Server-Side Request Forgery) org.springframework:spring-web Dependency in Confluence Data Center and Server	CVE-2024-22262	8.1
			SSRF (Server-Side Request Forgery) org.springframework:spring-web Dependency in Confluence Data Center and Server	CVE-2024-22259	8.1
			DoS (Denial of Service) org.apache.commons:commons-configuration2 Dependency in Confluence Data Center and Server	CVE-2024-29133	7.5
			DoS (Denial of Service) org.apache.commons:commons-configuration2 Dependency in Confluence Data Center and Server	CVE-2024-29131	7.5
Fisheye/Crucible	4.8.10 do 4.8.14	4.8.15 rekomendacja	DoS (Denial of Service) com.google.code.gson:gson Dependency in Crucible Data Center and Server	CVE-2022-25647	7.5
Jira Data Center and Server	9.12.0 do 9.12.7 (LTS) 9.4.0 do 9.4.20 (LTS)	9.16.0 to 9.16.1 Data Center Only 9.12.8 do 9.12.10 (LTS) rekomendacja 9.4.21 do 9.4.23 (LTS)	Information Disclosure in Jira Core Data Center	CVE-2024-21685	7.4
Jira Service Management Data Center and Server	5.15.2 5.12.0 do 5.12.7 (LTS) 5.4.0 do 5.4.20 (LTS)	5.16.0 do 5.16.1 Data Center Only 5.12.8 do 5.12.10 (LTS) recommended 5.4.21 do 5.4.23 (LTS)	Information Disclosure in Jira Service Management Data Center and Server	CVE-2024-21685	7.4