CVE-2020-29448 : Security Advisory and Response
Learn about CVE-2020-29448 affecting Confluence Server and Data Center versions, allowing remote attackers to read arbitrary files. Find mitigation steps and patching recommendations here.
Confluence Server and Confluence Data Center versions before 6.13.18, from 6.14.0 before 7.4.6, and from 7.5.0 before 7.8.3 are affected by an arbitrary file read vulnerability.
Understanding CVE-2020-29448
The ConfluenceResourceDownloadRewriteRule class in Confluence Server and Confluence Data Center allowed unauthenticated remote attackers to read arbitrary files within specific directories.
What is CVE-2020-29448?
The vulnerability in Confluence Server and Confluence Data Center versions allowed unauthorized users to access sensitive files through an incorrect path access check.
The Impact of CVE-2020-29448
This vulnerability could be exploited by remote attackers to read arbitrary files within the WEB-INF and META-INF directories, potentially exposing sensitive information.
Technical Details of CVE-2020-29448
The technical details of the CVE-2020-29448 vulnerability are as follows:
Vulnerability Description
The ConfluenceResourceDownloadRewriteRule class in affected versions allowed unauthenticated remote attackers to read arbitrary files within specific directories.
Affected Systems and Versions
- Product: Confluence Server
- Versions Affected: < 6.13.18, >= 6.14.0, < 7.4.6, >= 7.5.0, < 7.8.3
- Product: Confluence Data Center
- Versions Affected: < 6.13.18, >= 6.14.0, < 7.4.6, >= 7.5.0, < 7.8.3
Exploitation Mechanism
The vulnerability allowed attackers to exploit an incorrect path access check to read sensitive files within specific directories.
Mitigation and Prevention
To address CVE-2020-29448, consider the following mitigation steps:
Immediate Steps to Take
- Update Confluence Server and Confluence Data Center to the patched versions.
- Implement access controls to restrict unauthorized access to sensitive directories.
Long-Term Security Practices
- Regularly monitor and audit file access within the affected directories.
- Educate users on secure file handling practices to prevent unauthorized access.
Patching and Updates
- Apply the security patches provided by Atlassian for Confluence Server and Confluence Data Center to mitigate the vulnerability.