VYPR
← All advisories
High severity7.8NVD Advisory· Published Oct 16, 2018· Updated Jun 17, 2026

CVE-2018-13399

CVE-2018-13399

Description

The Microsoft Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows local attackers to escalate privileges because of weak permissions on the installation directory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Atlassian/Crucible2 versions
    cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:*range: <4.6.1
    • (no CPE)range: <4.6.1
  • Atlassian/Fisheye2 versions
    cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:*range: <4.6.1
    • (no CPE)range: <4.6.1
  • Atlassian/Fisheye and Cruciblellm-fuzzy2 versions
    <4.6.1+ 1 more
    • (no CPE)range: <4.6.1
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.