Remote Code Execution Vulnerability in Atlassian Bitbucket Data Center
CVE-2019-3397

9.1CRITICAL

Key Information:

Vendor
Atlassian
Status
Bitbucket Data Center
Vendor
CVE Published:
3 June 2019

Summary

This vulnerability affects Atlassian Bitbucket Data Center versions, allowing remote attackers with admin permissions to exploit path traversal vulnerabilities through the Data Center migration tool, potentially leading to remote code execution on the server. It is crucial for users of affected versions to update to the latest fixed releases to safeguard their systems.

Affected Version(s)

Bitbucket Data Center 5.13.0

Bitbucket Data Center < 5.13.6

Bitbucket Data Center 5.14.0

References

https://jira.atlassian.com/browse/BSERV-11706
x_refsource_MISC

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.