vulnerability
Atlassian Confluence: Information Exposure (CVE-2015-8399)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:L/Au:S/C:P/I:N/A:N) | Apr 11, 2016 | Apr 22, 2019 | Sep 18, 2024 |
Severity
4
CVSS
(AV:N/AC:L/Au:S/C:P/I:N/A:N)
Published
Apr 11, 2016
Added
Apr 22, 2019
Modified
Sep 18, 2024
Description
Atlassian Confluence before 5.8.17 allows remote authenticated users to read configuration files via the decoratorName parameter to (1) spaces/viewdefaultdecorator.action or (2) admin/viewdefaultdecorator.action.
Solution
atlassian-confluence-upgrade-5_8_17
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.