CVE-2017-7415 in Confluence

Summary

Atlassian Confluence 6.x before 6.0.7 allows remote attackers to bypass authentication and read any blog or page via the drafts diff REST resource.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 04/04/2017
• Disclosure: 04/27/2017
• Moderation: VulDB entry created
• Entries: 1: VDB-100632
• CPE: ready
• CWE: CWE-200 (Confirmed)
• CVSS: 7.4
• EPSS: 0.01093
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-7415
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-7415
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-7415/