CVE-2019-20104 - Vulnerability Details

Vendors	Products
Atlassian	Crowd

Link	Providers
https://jira.atlassian.com/browse/CWD-5526
https://zeroauth.ltd/blog/2020/02/07/cve-2019-20104-atlassian-crowd-openid-client-vulnerable-to-remote-dos-via-xml-entity-expansion/

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "Crowd", "vendor": "Atlassian", "versions": [{"lessThan": "3.6.2", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "3.7.0", "versionType": "custom"}, {"lessThan": "3.7.1", "status": "affected", "version": "unspecified", "versionType": "custom"}]}], "datePublic": "2020-02-05T00:00:00", "descriptions": [{"lang": "en", "value": "The OpenID client application in Atlassian Crowd before version 3.6.2, and from version 3.7.0 before 3.7.1 allows remote attackers to perform a Denial of Service attack via an XML Entity Expansion vulnerability."}], "problemTypes": [{"descriptions": [{"description": "Improper Restriction of XML External Entity Reference", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-02-10T16:41:55", "orgId": "f08a6ab8-ed46-4c22-8884-d911ccfe3c66", "shortName": "atlassian"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://jira.atlassian.com/browse/CWD-5526"}, {"tags": ["x_refsource_MISC"], "url": "https://zeroauth.ltd/blog/2020/02/07/cve-2019-20104-atlassian-crowd-openid-client-vulnerable-to-remote-dos-via-xml-entity-expansion/"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@atlassian.com", "DATE_PUBLIC": "2020-02-05T00:00:00", "ID": "CVE-2019-20104", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Crowd", "version": {"version_data": [{"version_affected": "<", "version_value": "3.6.2"}, {"version_affected": ">=", "version_value": "3.7.0"}, {"version_affected": "<", "version_value": "3.7.1"}]}}]}, "vendor_name": "Atlassian"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The OpenID client application in Atlassian Crowd before version 3.6.2, and from version 3.7.0 before 3.7.1 allows remote attackers to perform a Denial of Service attack via an XML Entity Expansion vulnerability."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Improper Restriction of XML External Entity Reference"}]}]}, "references": {"reference_data": [{"name": "https://jira.atlassian.com/browse/CWD-5526", "refsource": "MISC", "url": "https://jira.atlassian.com/browse/CWD-5526"}, {"name": "https://zeroauth.ltd/blog/2020/02/07/cve-2019-20104-atlassian-crowd-openid-client-vulnerable-to-remote-dos-via-xml-entity-expansion/", "refsource": "MISC", "url": "https://zeroauth.ltd/blog/2020/02/07/cve-2019-20104-atlassian-crowd-openid-client-vulnerable-to-remote-dos-via-xml-entity-expansion/"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T02:32:10.611Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://jira.atlassian.com/browse/CWD-5526"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://zeroauth.ltd/blog/2020/02/07/cve-2019-20104-atlassian-crowd-openid-client-vulnerable-to-remote-dos-via-xml-entity-expansion/"}]}]}, "cveMetadata": {"assignerOrgId": "f08a6ab8-ed46-4c22-8884-d911ccfe3c66", "assignerShortName": "atlassian", "cveId": "CVE-2019-20104", "datePublished": "2020-02-06T03:10:24.881912Z", "dateReserved": "2019-12-30T00:00:00", "dateUpdated": "2024-09-16T17:04:16.877Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : Crowd (string)

vendor : Atlassian (string)

versions : [ »

0 : { »

lessThan : 3.6.2 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

1 : { »

lessThan : unspecified (string)

status : affected (string)

version : 3.7.0 (string)

versionType : custom (string)

}

2 : { »

lessThan : 3.7.1 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

]

}

]

datePublic : 2020-02-05T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : The OpenID client application in Atlassian Crowd before version 3.6.2, and from version 3.7.0 before 3.7.1 allows remote attackers to perform a Denial of Service attack via an XML Entity Expansion vulnerability. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : Improper Restriction of XML External Entity Reference (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2020-02-10T16:41:55 (string)

orgId : f08a6ab8-ed46-4c22-8884-d911ccfe3c66 (string)

shortName : atlassian (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://jira.atlassian.com/browse/CWD-5526 (string)

}

1 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://zeroauth.ltd/blog/2020/02/07/cve-2019-20104-atlassian-crowd-openid-client-vulnerable-to-remote-dos-via-xml-entity-expansion/ (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : security@atlassian.com (string)

DATE_PUBLIC : 2020-02-05T00:00:00 (string)

ID : CVE-2019-20104 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : Crowd (string)

version : { »

version_data : [ »

0 : { »

version_affected : < (string)

version_value : 3.6.2 (string)

}

1 : { »

version_affected : >= (string)

version_value : 3.7.0 (string)

}

2 : { »

version_affected : < (string)

version_value : 3.7.1 (string)

}

]

}

]

}

vendor_name : Atlassian (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : The OpenID client application in Atlassian Crowd before version 3.6.2, and from version 3.7.0 before 3.7.1 allows remote attackers to perform a Denial of Service attack via an XML Entity Expansion vulnerability. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Improper Restriction of XML External Entity Reference (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://jira.atlassian.com/browse/CWD-5526 (string)

refsource : MISC (string)

url : https://jira.atlassian.com/browse/CWD-5526 (string)

}

1 : { »

name : https://zeroauth.ltd/blog/2020/02/07/cve-2019-20104-atlassian-crowd-openid-client-vulnerable-to-remote-dos-via-xml-entity-expansion/ (string)

refsource : MISC (string)

url : https://zeroauth.ltd/blog/2020/02/07/cve-2019-20104-atlassian-crowd-openid-client-vulnerable-to-remote-dos-via-xml-entity-expansion/ (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-05T02:32:10.611Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://jira.atlassian.com/browse/CWD-5526 (string)

}

1 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://zeroauth.ltd/blog/2020/02/07/cve-2019-20104-atlassian-crowd-openid-client-vulnerable-to-remote-dos-via-xml-entity-expansion/ (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : f08a6ab8-ed46-4c22-8884-d911ccfe3c66 (string)

assignerShortName : atlassian (string)

cveId : CVE-2019-20104 (string)

datePublished : 2020-02-06T03:10:24.881912Z (string)

dateReserved : 2019-12-30T00:00:00 (string)

dateUpdated : 2024-09-16T17:04:16.877Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:*", "matchCriteriaId": "10182807-762F-492A-A74F-AAF659F8B45B", "versionEndExcluding": "3.2.11", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:*", "matchCriteriaId": "ACABB443-7E07-4C6F-A32B-DD2F78603E81", "versionEndExcluding": "3.3.8", "versionStartIncluding": "3.3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:*", "matchCriteriaId": "8C438EFF-3115-4932-A8E4-2A3D333C0420", "versionEndExcluding": "3.4.7", "versionStartIncluding": "3.4.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:*", "matchCriteriaId": "32363B16-622B-40B2-81FD-891350688619", "versionEndExcluding": "3.5.2", "versionStartIncluding": "3.5.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:*", "matchCriteriaId": "F5E26921-D031-47FE-98BA-E0BDF43A1CDD", "versionEndExcluding": "3.6.2", "versionStartIncluding": "3.6.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:*", "matchCriteriaId": "ED1160D9-F1BB-4D34-9240-9ECB04C2D19A", "versionEndExcluding": "3.7.1", "versionStartIncluding": "3.6.3", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:*", "matchCriteriaId": "CB431461-C139-4E40-9B50-CEE0EDAE6679", "versionEndExcluding": "4.0.0", "versionStartIncluding": "3.7.2", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The OpenID client application in Atlassian Crowd before version 3.6.2, and from version 3.7.0 before 3.7.1 allows remote attackers to perform a Denial of Service attack via an XML Entity Expansion vulnerability."}, {"lang": "es", "value": "La aplicaci\u00f3n de cliente OpenID en Atlassian Crowd antes de la versi\u00f3n 3.6.2 y desde la versi\u00f3n 3.7.0 anteriores a 3.7.1, permite a atacantes remotos llevar a cabo un ataque de Denegaci\u00f3n de Servicio por medio de una vulnerabilidad de tipo XML Entity Expansion."}], "id": "CVE-2019-20104", "lastModified": "2024-11-21T04:38:04.280", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-02-06T03:15:10.123", "references": [{"source": "security@atlassian.com", "tags": ["Vendor Advisory"], "url": "https://jira.atlassian.com/browse/CWD-5526"}, {"source": "security@atlassian.com", "tags": ["Exploit", "Technical Description"], "url": "https://zeroauth.ltd/blog/2020/02/07/cve-2019-20104-atlassian-crowd-openid-client-vulnerable-to-remote-dos-via-xml-entity-expansion/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://jira.atlassian.com/browse/CWD-5526"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Technical Description"], "url": "https://zeroauth.ltd/blog/2020/02/07/cve-2019-20104-atlassian-crowd-openid-client-vulnerable-to-remote-dos-via-xml-entity-expansion/"}], "sourceIdentifier": "security@atlassian.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-776"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 10182807-762F-492A-A74F-AAF659F8B45B (string)

versionEndExcluding : 3.2.11 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:* (string)

matchCriteriaId : ACABB443-7E07-4C6F-A32B-DD2F78603E81 (string)

versionEndExcluding : 3.3.8 (string)

versionStartIncluding : 3.3.0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 8C438EFF-3115-4932-A8E4-2A3D333C0420 (string)

versionEndExcluding : 3.4.7 (string)

versionStartIncluding : 3.4.0 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 32363B16-622B-40B2-81FD-891350688619 (string)

versionEndExcluding : 3.5.2 (string)

versionStartIncluding : 3.5.0 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:* (string)

matchCriteriaId : F5E26921-D031-47FE-98BA-E0BDF43A1CDD (string)

versionEndExcluding : 3.6.2 (string)

versionStartIncluding : 3.6.0 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:* (string)

matchCriteriaId : ED1160D9-F1BB-4D34-9240-9ECB04C2D19A (string)

versionEndExcluding : 3.7.1 (string)

versionStartIncluding : 3.6.3 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:* (string)

matchCriteriaId : CB431461-C139-4E40-9B50-CEE0EDAE6679 (string)

versionEndExcluding : 4.0.0 (string)

versionStartIncluding : 3.7.2 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : The OpenID client application in Atlassian Crowd before version 3.6.2, and from version 3.7.0 before 3.7.1 allows remote attackers to perform a Denial of Service attack via an XML Entity Expansion vulnerability. (string)

}

1 : { »

lang : es (string)

value : La aplicación de cliente OpenID en Atlassian Crowd antes de la versión 3.6.2 y desde la versión 3.7.0 anteriores a 3.7.1, permite a atacantes remotos llevar a cabo un ataque de Denegación de Servicio por medio de una vulnerabilidad de tipo XML Entity Expansion. (string)

}

]

id : CVE-2019-20104 (string)

lastModified : 2024-11-21T04:38:04.280 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : PARTIAL (string)

baseScore : 5 (number)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:L/Au:N/C:N/I:N/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2020-02-06T03:15:10.123 (string)

references : [ »

0 : { »

source : security@atlassian.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://jira.atlassian.com/browse/CWD-5526 (string)

}

1 : { »

source : security@atlassian.com (string)

tags : [ »

0 : Exploit (string)

1 : Technical Description (string)

]

url : https://zeroauth.ltd/blog/2020/02/07/cve-2019-20104-atlassian-crowd-openid-client-vulnerable-to-remote-dos-via-xml-entity-expansion/ (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://jira.atlassian.com/browse/CWD-5526 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Exploit (string)

1 : Technical Description (string)

]

url : https://zeroauth.ltd/blog/2020/02/07/cve-2019-20104-atlassian-crowd-openid-client-vulnerable-to-remote-dos-via-xml-entity-expansion/ (string)

}

]

sourceIdentifier : security@atlassian.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-776 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object