Atlassian Bitbucket Server Vulnerability Allows MITM Attacks on Repository Imports
CVE-2020-14171

6.5MEDIUM

Key Information:

Vendor
Atlassian
Status
Bitbucket Server
Vendor
CVE Published:
9 July 2020

Summary

This vulnerability in Atlassian Bitbucket Server permits remote attackers to intercept unencrypted repository import requests. Attackers can exploit this flaw by performing a Man-in-the-Middle (MITM) attack, allowing them to capture sensitive data during the communication process. It is crucial for users of affected Bitbucket Server versions to upgrade to version 7.2.4 or later to safeguard against potential exploits.

Affected Version(s)

Bitbucket Server 4.9.0

Bitbucket Server < 7.2.4

References

https://jira.atlassian.com/browse/BSERV-12434
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.