CVE-2017-16861 Explained : Impact and Mitigation

A potential issue was identified in Fisheye and Crucible, allowing for double OGNL evaluation in certain actions, potentially leading to Remote Code Execution.

Understanding CVE-2017-16861

What is CVE-2017-16861?

This CVE refers to a vulnerability in Atlassian's Fisheye and Crucible that could be exploited by an attacker to execute Java code on vulnerable systems.

The Impact of CVE-2017-16861

The vulnerability allows attackers to execute their Java code on systems running affected versions of Fisheye and Crucible.

Technical Details of CVE-2017-16861

Vulnerability Description

The issue arises from double OGNL evaluation in specific actions, enabling Remote Code Execution.

Affected Systems and Versions

Product: Fisheye and Crucible
Vendor: Atlassian
Versions Affected:
Prior to 4.4.5
4.5.0 prior to 4.5.2

Exploitation Mechanism

Attackers with access to the web interface of Fisheye or Crucible can exploit this vulnerability to execute Java code.

Mitigation and Prevention

Immediate Steps to Take

Update Fisheye and Crucible to version 4.4.5 or 4.5.2, which contain fixes for this vulnerability.
Monitor for any unauthorized access or unusual activities on the systems.

Long-Term Security Practices

Regularly update software and apply security patches promptly.
Implement strong access controls and authentication mechanisms.
Conduct regular security assessments and penetration testing.

Patching and Updates

Ensure that Fisheye and Crucible are kept up to date with the latest security patches to prevent exploitation of known vulnerabilities.