Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p5f2-h5fv-xrrx

Опубликовано: 10 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

The Syracom Secure Login (2FA) plugin for Jira, Confluence, and Bitbucket through 3.1.4.5 allows remote attackers to bypass 2FA by interacting with the /rest endpoint of Jira, Confluence, or Bitbucket. In the default configuration, /rest is allowlisted.

The Syracom Secure Login (2FA) plugin for Jira, Confluence, and Bitbucket through 3.1.4.5 allows remote attackers to bypass 2FA by interacting with the /rest endpoint of Jira, Confluence, or Bitbucket. In the default configuration, /rest is allowlisted.

EPSS

Процентиль: 34%
0.00139
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-266

Связанные уязвимости

CVSS3: 5.4
nvd
больше 1 года назад

The Syracom Secure Login (2FA) plugin for Jira, Confluence, and Bitbucket through 3.1.4.5 allows remote attackers to bypass 2FA by interacting with the /rest endpoint of Jira, Confluence, or Bitbucket. In the default configuration, /rest is allowlisted.

EPSS

Процентиль: 34%
0.00139
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-266