CVE-2016-6496

概要

参考情報

• securityfocus.com/archive/1/539655/100/0/threaded
• securityfocus.com/bid/93826 · Third Party Advisory
• confluence.atlassian.com/crowd/crowd-security-advisory-2016-10-19-856697283.html · Vendor Advisory
• jira.atlassian.com/browse/CWD-4790 · Issue Tracking
• blackhat.com/docs/us-16/materials/us-16-Munoz-A-Journey-From-JNDI-LDAP-Manipulation-To-RCE-wp.pdf · Not Applicable

crowd のその他の脆弱性

• CVE-2026-21589高 7.5悪用確認済み（CISA KEV）This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Ba…
• CVE-2026-21569高 7.9This High severity XXE (XML External Entity Injection) vulnerability was introduced in version 7.1.0 of Crowd Data Center and Server. Th…
• CVE-2023-22521高 8.8This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.6 of Crowd Data Center and Server. This RCE (R…
• CVE-2022-43782緊急 9.8Affected versions of Atlassian Crowd allow an attacker to authenticate as the crowd application via security misconfiguration and subsequent…
• CVE-2022-26137高 8.8A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked w…