Atlassian, Splunk Patch Dozens of Critical, High-Severity Vulnerabilities
Atlassian and Splunkthis week announced patches for over 250 vulnerabilities across their products, including dozens of critical- and high-severity flaws.
On Tuesday, Atlassian published a Security Bulletin detailing 10 critical- and 162 high-severity issues in third-party dependencies, patched with fresh security updates for Bamboo, Bitbucket,Confluence, Crowd, Fisheye/Crucible, and Jira.
Because the vulnerable libraries are used across multiple products, many of the patched security defects affect multiple products. Overall, the fixes appear to address approximately 109 unique CVEs.
Successful exploitation of the bugs could allow attackers to mount remote code execution (RCE), denial-of-service (DoS), information theft, man-in-the-middle (MitM), authentication bypass, server-side request forgery (SSRF), and other types of attacks.
On Wednesday, Splunk announced fixes for at least 150 vulnerabilities across Splunk Enterprise, SOAR, Universal Forwarder, and their associated apps and plugins, including issues impacting third-party libraries.
Dozens of flaws are critical- and high-severity vulnerabilities, and some of them deserve...
Copyright of this story solely belongs to securityweek.com. To see the full text click HERE
