Test ID:	1.3.6.1.4.1.25623.1.0.106154
Category:	Web application abuses
Title:	Atlassian JIRA < 6.0.5 Directory Traversal Vulnerabilities
Summary:	Atlassian JIRA is prone to two directory traversal vulnerabilities.
Description:	Summary: Atlassian JIRA is prone to two directory traversal vulnerabilities. Vulnerability Insight: Atlassian JIRA is prone to two directory traversal vulnerabilities: Directory traversal vulnerability in the Importers plugin allows remote attackers to create arbitrary files via unspecified vectors. (CVE-2014-2313) Directory traversal vulnerability in the Issue Collector plugin allows remote attackers to create arbitrary files via unspecified vectors. (CVE-2014-2314) Vulnerability Impact: An unauthenticated remote attacker may upload arbitrary files. Affected Software/OS: Versions prior to 6.0.5 on Windows. Solution: Update to version 6.0.5 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-2313 Common Vulnerability Exposure (CVE) ID: CVE-2014-2314 http://www.exploit-db.com/exploits/32725 http://blog.h3xstream.com/2014/02/jira-path-traversal-explained.html
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.