CVE-2016-6668

HIGH 7.5CVE-2016-6668 · Published 23/01/2017 · updated 17/06/2026

In short

CVE-2016-6668 is a HIGH (CVSS 7.5) vulnerability affecting confluence server (atlassian), jira integration for hipchat (atlassian).
Chance of exploitation in the next 30 days (EPSS): 3.8%, higher than 90.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
confluence server atlassian	`= 5.10.0= 5.10.1= 5.10.2= 5.10.3= 5.5.0= 5.9.1= 5.9.10= 5.9.11= 5.9.12= 5.9.2= 5.9.3= 5.9.4= 5.9.5= 5.9.6= 5.9.7= 5.9.8= 5.9.9`	No fix yet
jira integration for hipchat atlassian	`= 6.26.0= 6.26.10= 6.29.1= 6.29.2= 6.31.0= 7.1.0= 7.2.1= 7.3.2= 7.3.3= 7.4.1= 7.8.1= 7.8.12= 7.8.3`	No fix yet

Description

The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before 7.3.7, and 7.4.0 before 7.8.17; Confluence HipChat plugin 6.26.0 before 7.8.17; and HipChat for JIRA plugin 6.26.0 before 7.8.17 allows remote attackers to obtain the secret key for communicating with HipChat instances by reading unspecified pages.

References

packetstormsecurity.com/files/139004/Atlassian-HipChat-Secret-Key-Disclosure.html · Third Party Advisory
securityfocus.com/archive/1/539530/100/0/threaded · Broken Link
securityfocus.com/bid/93159 · Broken Link
confluence.atlassian.com/bitbucketserver/bitbucket-server-security-advisory-2016-09-21-840698321.html · Vendor Advisory
confluence.atlassian.com/doc/confluence-security-advisory-2016-09-21-849052104.html · Vendor Advisory
confluence.atlassian.com/jira/jira-and-hipchat-for-jira-plugin-security-advisory-2016-09-21-849052099.html · Vendor Advisory

More vulnerabilities in confluence server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2016-6668 is a HIGH (CVSS 7.5) vulnerability affecting confluence server (atlassian), jira integration for hipchat (atlassian).

Chance of exploitation in the next 30 days (EPSS): 3.8%, higher than 90.1% of all vulnerabilities.

No patched version is listed yet: follow the vendor's advisory in References.

Package

Affected versions

Patched versions

confluence server

atlassian

= 5.10.0= 5.10.1= 5.10.2= 5.10.3= 5.5.0= 5.9.1= 5.9.10= 5.9.11= 5.9.12= 5.9.2= 5.9.3= 5.9.4= 5.9.5= 5.9.6= 5.9.7= 5.9.8= 5.9.9

No fix yet

jira integration for hipchat

atlassian

= 6.26.0= 6.26.10= 6.29.1= 6.29.2= 6.31.0= 7.1.0= 7.2.1= 7.3.2= 7.3.3= 7.4.1= 7.8.1= 7.8.12= 7.8.3

No fix yet

Description

More vulnerabilities in confluence server

See all →