CVE-2018-5231

{"id": "CVE-2018-5231", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2018-05-16T13:29:00.517", "references": [{"url": "http://www.securityfocus.com/bid/104205", "tags": ["Third Party Advisory", "VDB Entry"], "source": "security@atlassian.com"}, {"url": "https://jira.atlassian.com/browse/JRASERVER-67290", "tags": ["Vendor Advisory"], "source": "security@atlassian.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "The ForgotLoginDetails resource in Atlassian Jira before version 7.6.6, from version 7.7.0 before version 7.7.4, from version 7.8.0 before version 7.8.4 and from version 7.9.0 before version 7.9.2 allows remote attackers to perform a denial of service attack via sending requests to it."}, {"lang": "es", "value": "El recurso ForgotLoginDetails en Atlassian Jira en versiones anteriores a la 7.6.6, desde la versi\u00f3n 7.7.0 hasta la 7.7.4, desde la versi\u00f3n 7.8.0 hasta la 7.8.4 y desde la versi\u00f3n 7.9.0 hasta la 7.9.2 permite que atacantes remotos realicen un ataque de denegaci\u00f3n de servicio (DoS) mediante el env\u00edo de peticiones al mismo."}], "lastModified": "2022-03-25T17:22:38.420", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EF1A112D-4024-4205-900D-BBFFABF01C7B", "versionEndExcluding": "7.6.6"}, {"criteria": "cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A38A1E0B-95D0-409F-AE3C-A5725F4605FA", "versionEndExcluding": "7.7.4", "versionStartIncluding": "7.7.0"}, {"criteria": "cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1EC68826-9A37-4903-A349-407510635825", "versionEndExcluding": "7.8.4", "versionStartIncluding": "7.8.0"}, {"criteria": "cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3C219C9D-07EB-41ED-AE45-E18A366CA4FF", "versionEndExcluding": "7.9.2", "versionStartIncluding": "7.9.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@atlassian.com"}