CVE-2017-18096

{"id": "CVE-2017-18096", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "published": "2018-04-04T12:29:00.217", "references": [{"url": "https://ecosystem.atlassian.net/browse/APL-1359", "tags": ["Vendor Advisory"], "source": "security@atlassian.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-918"}]}], "descriptions": [{"lang": "en", "value": "The OAuth status rest resource in Atlassian Application Links before version 5.2.7, from 5.3.0 before 5.3.4 and from 5.4.0 before 5.4.3 allows remote attackers with administrative rights to access the content of internal network resources via a Server Side Request Forgery (SSRF) by creating an OAuth application link to a location they control and then redirecting access from the linked location's OAuth status rest resource to an internal location. When running in an environment like Amazon EC2, this flaw maybe used to access to a metadata resource that provides access credentials and other potentially confidential information."}, {"lang": "es", "value": "El recurso rest de estado OAuth en Atlassian Application Links, en versiones anteriores a la 5.2.7, desde la versi\u00f3n 5.3.0 y anterior a la 5.3.4 y desde la versi\u00f3n 5.4.0 anterior a la 5.4.3, permite que atacantes remotos con derechos administrativos accedan al contenido de recursos internos de red mediante SSRF (Server-Side Request Forgery) creando un enlace de aplicaci\u00f3n OAuth a una ubicaci\u00f3n que controlan y despu\u00e9s redirigiendo el acceso desde el recurso rest de estado OAuth de la ubicaci\u00f3n enlazada a una ubicaci\u00f3n interna. Cuando se ejecuta en un entorno como Amazon EC2, este error puede emplearse para acceder a un recurso de metadatos que proporciona credenciales de acceso y otro tipo de informaci\u00f3n potencialmente confidencial."}], "lastModified": "2018-05-10T13:02:24.257", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:atlassian:application_links:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E48B5EFD-618A-41A2-8CA9-B181E80230B3", "versionEndExcluding": "5.2.7"}, {"criteria": "cpe:2.3:a:atlassian:application_links:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CB5BEC1E-10C4-4483-B465-11BC0DBD8676", "versionEndExcluding": "5.3.4", "versionStartIncluding": "5.3.0"}, {"criteria": "cpe:2.3:a:atlassian:application_links:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "62C0EA11-1465-4133-979E-FDD8F5504043", "versionEndExcluding": "5.4.3", "versionStartIncluding": "5.4.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@atlassian.com"}