Unrated severityNVD Advisory· Published Feb 18, 2021· Updated Sep 16, 2024

CVE-2020-36233

Description

The Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before version 6.10.9, 7.x before 7.6.4, and from version 7.7.0 before 7.10.1 allows local attackers to escalate privileges because of weak permissions on the installation directory.

Affected products

Atlassian/Bitbucket Data Centerv5
Range: unspecified
Atlassian/Bitbucket Servercpe-rescue
Range: unspecified

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.kb.cert.org/vuls/id/240785mitrethird-party-advisoryx_refsource_CERT-VN
jira.atlassian.com/browse/BSERV-12753mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000