description: This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery agent installed. The vulnerability exists between the Assets Discovery application (formerly known as Insight Discovery) and the Assets Discovery agent.
problem types: RCE (Remote Code Execution)
affected:
{
vendor: Atlassian
product: Assets Discovery Cloud
versions:
version: < 1.0.0, status: unaffected
version: >= 1.0.0, status: affected
version: >= 1.5.7.0, status: affected
version: >= 1.5.7.1, status: affected
version: >= 1.5.7.3, status: affected
version: >= 1.5.7.4, status: affected
version: >= 1.6.1.2, status: affected
version: >= 1.6.2.0, status: affected
version: >= 1.6.3.0, status: affected
version: >= 1.6.4.0, status: affected
version: >= 1.6.4.4, status: affected
version: >= 1.7.0.0, status: affected
version: >= 1.7.1.0, status: affected
version: >= 1.7.2.0, status: affected
version: >= 1.8.0.0, status: affected
version: >= 1.8.1.1, status: affected
version: >= 1.8.1.2, status: affected
version: >= 1.8.1.3, status: affected
version: >= 1.8.1.4, status: affected
version: >= 1.8.1.5, status: affected
version: >= 1.8.2.0, status: affected
version: >= 2.0.0.0, status: affected
version: >= 3.1.0, status: affected
version: >= 3.1.1, status: affected
version: >= 3.1.10, status: affected
version: >= 3.1.11, status: affected
version: >= 3.1.2, status: affected
version: >= 3.1.3, status: affected
version: >= 3.1.4, status: affected
version: >= 3.1.5, status: affected
version: >= 3.1.6, status: affected
version: >= 3.1.7, status: affected
version: >= 3.1.8, status: affected
version: >= 3.1.9, status: affected
version: >= 3.2.0, status: unaffected
}
{
vendor: Atlassian
product: Assets Discovery Data Center
versions:
version: < 1.0.0, status: unaffected
version: >= 1.0.0, status: affected
version: >= 3.1.0, status: affected
version: >= 3.1.1, status: affected
version: >= 3.1.10, status: affected
version: >= 3.1.11, status: affected
version: >= 3.1.2, status: affected
version: >= 3.1.3, status: affected
version: >= 3.1.4, status: affected
version: >= 3.1.5, status: affected
version: >= 3.1.6, status: affected
version: >= 3.1.7, status: affected
version: >= 3.1.9, status: affected
version: >= 6.0.0, status: affected
version: >= 6.1.10, status: affected
version: >= 6.1.11, status: affected
version: >= 6.1.12, status: affected
version: >= 6.1.13, status: affected
version: >= 6.1.14, status: affected
version: >= 6.1.9, status: affected
version: >= 6.2.0, status: unaffected
}
metrics:
cvssV3_0: [
version: 3.0
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
baseScore: 9.8
baseSeverity: CRITICAL
]