description: SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later before 7.6.14, 7.7.0 and later prior to 7.17.6, 7.18.0 and later prior to 7.18.4, 7.19.0 and later prior to 7.19.4, and 7.20.0 allow a remote, unauthenticated attacker to execute arbitrary code via Java deserialization.
problem types: Deserialization of untrusted data
affected:
{
product: Bitbucket Data Center
vendor: Atlassian
versions:
lessThan: unspecified, status: affected, version: 5.14.0, versionType: custom
lessThan: 7.6.14, status: affected, version: unspecified, versionType: custom
lessThan: unspecified, status: affected, version: 7.7.0, versionType: custom
lessThan: 7.17.6, status: affected, version: unspecified, versionType: custom
lessThan: unspecified, status: affected, version: 7.18.0, versionType: custom
lessThan: 7.18.4, status: affected, version: unspecified, versionType: custom
lessThan: unspecified, status: affected, version: 7.19.0, versionType: custom
lessThan: 7.19.4, status: affected, version: unspecified, versionType: custom
status: affected, version: 7.20.0
}