NetSight
IP …
high7.5

CVE-2017-7415

Atlassian Confluence 6.x before 6.0.7 allows remote attackers to bypass authentication and read any blog or page via the drafts diff REST resource.

Impact

Atlassian Confluence 6.x before 6.0.7 allows remote attackers to bypass authentication and read any blog or page via the drafts diff REST resource.

Affected products

VendorProductAffected versions
AtlassianConfluence Server
Versions 6.0.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5

Weakness classification

CWE-200

References