CVE-2012-2927 The TM Software Tempo plugin before 6.4.3.1, 6.5.x before 6.5.0.2, and 7.x before 7.0.3 for Atlassian JIRA does not properly restrict the capabilities of third-party XML parsers, which allows remote a...
MediumCVSS 4.0
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The TM Software Tempo plugin before 6.4.3.1, 6.5.x before 6.5.0.2, and 7.x before 7.0.3 for Atlassian JIRA does not properly restrict the capabilities of third-party XML parsers, which allows remote authenticated users to cause a denial of service (resource consumption) via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tm software tempo | <= 6.4.3 | No fix listed |
| tm software tempo | = 2.2 | No fix listed |
| tm software tempo | = 2.3 | No fix listed |
| tm software tempo | = 2.3.1 | No fix listed |
| tm software tempo | = 2.4.1 | No fix listed |
| tm software tempo | = 2.5.1 | No fix listed |
| tm software tempo | = 2.6.1 | No fix listed |
| tm software tempo | = 2.7.1 | No fix listed |
| tm software tempo | = 2.8.1 | No fix listed |
| tm software tempo | = 4.0 | No fix listed |
| tm software tempo | = 4.0.1 | No fix listed |
| tm software tempo | = 4.1 | No fix listed |
| tm software tempo | = 4.2 | No fix listed |
| tm software tempo | = 4.3 | No fix listed |
| tm software tempo | = 4.4 | No fix listed |
| tm software tempo | = 4.4.2 | No fix listed |
| tm software tempo | = 4.5 | No fix listed |
| tm software tempo | = 4.5.2 | No fix listed |
| tm software tempo | = 5.0 | No fix listed |
| tm software tempo | = 5.1 | No fix listed |
| tm software tempo | = 5.1.1 | No fix listed |
| tm software tempo | = 5.2 | No fix listed |
| tm software tempo | = 5.2.1 | No fix listed |
| tm software tempo | = 5.2.2 | No fix listed |
| tm software tempo | = 5.2.3 | No fix listed |
Show 32 more
| Product | Affected versions | Fixed in |
|---|---|---|
| tm software tempo | = 5.3 | No fix listed |
| tm software tempo | = 5.3.1 | No fix listed |
| tm software tempo | = 5.3.2 | No fix listed |
| tm software tempo | = 5.3.3 | No fix listed |
| tm software tempo | = 5.3.3.1 | No fix listed |
| tm software tempo | = 5.4 | No fix listed |
| tm software tempo | = 5.4.1 | No fix listed |
| tm software tempo | = 5.4.2 | No fix listed |
| tm software tempo | = 6.0.0 | No fix listed |
| tm software tempo | = 6.0.1 | No fix listed |
| tm software tempo | = 6.0.2 | No fix listed |
| tm software tempo | = 6.0.3 | No fix listed |
| tm software tempo | = 6.1.0 | No fix listed |
| tm software tempo | = 6.1.1-jira42 | No fix listed |
| tm software tempo | = 6.2.0 | No fix listed |
| tm software tempo | = 6.2.1-jira42 | No fix listed |
| tm software tempo | = 6.2.2-jira42 | No fix listed |
| tm software tempo | = 6.2.3-jira42 | No fix listed |
| tm software tempo | = 6.2.4-jira42 | No fix listed |
| tm software tempo | = 6.2.5-jira42 | No fix listed |
| tm software tempo | = 6.2.6-jira42 | No fix listed |
| tm software tempo | = 6.2.7-jira42 | No fix listed |
| tm software tempo | = 6.3.1-jira42 | No fix listed |
| tm software tempo | = 6.4-jira42 | No fix listed |
| tm software tempo | = 6.4.2 | No fix listed |
| tm software tempo | = 6.5 | No fix listed |
| tm software tempo | = 7.0 | No fix listed |
| tm software tempo | = 7.0.0-rc1 | No fix listed |
| tm software tempo | = 7.0.0-rc2 | No fix listed |
| tm software tempo | = 7.0.2 | No fix listed |
| tm software tempo6.3.0 | = jira42 | No fix listed |
| tm software tempo6.3.2 | = jira42 | No fix listed |
References
- confluence.atlassian.com patch vendor-advisory
- 81993 vdb-entry
- 49166 third-party-advisory vendor-advisory
- 53595 vdb-entry
- jira-xml-dos(75697) vdb-entry