PT-2017-13561
CVE-2017-14585
·
Publicado
2017-11-27
·
Atualizado
2017-12-20
Descrição por
CVSS 2.0
9.0
AltaMétricasAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Hipchat Server versions 2.2.0 through 2.2.6
Hipchat Data Center versions 3.0.0 through 3.1.0
Description
A Server Side Request Forgery (SSRF) issue could lead to remote code execution for authenticated administrators.
Recommendations
For Hipchat Server versions 2.2.0 through 2.2.6, update to a version after 2.2.6 to resolve the issue.
For Hipchat Data Center versions 3.0.0 through 3.1.0, update to a version after 3.1.0 to resolve the issue.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾