CVE-2017-18101

Name of the Vulnerable Software and Affected Versions: Atlassian JIRA Server versions prior to 7.6.5 Atlassian JIRA Server versions 7.7.0 through 7.7.2 Atlassian JIRA Server versions 7.8.0 through 7.8.2 Atlassian JIRA Server version 7.9.0

Description: The issue is related to missing permission checks in various administrative external system import resources. This allows remote attackers to run import operations and determine if an internal service exists.

Recommendations: For versions prior to 7.6.5, update to version 7.6.5 or later. For versions 7.7.0 through 7.7.2, update to version 7.7.3 or later. For versions 7.8.0 through 7.8.2, update to version 7.8.3 or later. For version 7.9.0, update to a version later than 7.9.0.