CVEvulnerability
CVE-2007-6619
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-01-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The Setup Wizard in Atlassian JIRA Enterprise Edition before 3.12.1 does not properly restrict setup attempts after setup is complete, which allows remote attackers to change the default language.
Affected configurations
• atlassian jira (<= 3.12)
Related
Weakness · not in database (1)
References
- http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2007-12-24 Patch
- http://osvdb.org/42770 osvdb.org
- http://secunia.com/advisories/27954 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/27095 www.securityfocus.com
- http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2007-12-24 Patch
- http://osvdb.org/42770 osvdb.org
- http://secunia.com/advisories/27954 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/27095 www.securityfocus.com