U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2016-6668

Change History

Initial Analysis by NIST 1/25/2017 4:29:16 PM

Action Type Old Value New Value
Added CPE Configuration

								
							
							
						
OR
     *cpe:2.3:a:atlassian:confluence:5.10.0:*:*:*:*:*:*:*
     *cpe:2.3:a:atlassian:confluence:5.10.1:*:*:*:*:*:*:*
     *cpe:2.3:a:atlassian:confluence:5.10.2:*:*:*:*:*:*:*
     *cpe:2.3:a:atlassian:confluence:5.10.3:*:*:*:*:*:*:*
     *cpe:2.3:a:atlassian:confluence:5.5.0:*:*:*:*:*:*:*
     *cpe:2.3:a:atlassian:confluence:5.9.1:*:*:*:*:*:*:*
     *cpe:2.3:a:atlassian:confluence:5.9.10:*:*:*:*:*:*:*
     *cpe:2.3:a:atlassian:confluence:5.9.11:*:*:*:*:*:*:*
     *cpe:2.3:a:atlassian:confluence:5.9.12:*:*:*:*:*:*:*
     *cpe:2.3:a:atlassian:confluence:5.9.2:*:*:*:*:*:*:*
     *cpe:2.3:a:atlassian:confluence:5.9.3:*:*:*:*:*:*:*
     *cpe:2.3:a:atlassian:confluence:5.9.4:*:*:*:*:*:*:*
     *cpe:2.3:a:atlassian:confluence:5.9.5:*:*:*:*:*:*:*
     *cpe:2.3:a:atlassian:confluence:5.9.6:*:*:*:*:*:*:*
     *cpe:2.3:a:atlassian:confluence:5.9.7:*:*:*:*:*:*:*
     *cpe:2.3:a:atlassian:confluence:5.9.8:*:*:*:*:*:*:*
     *cpe:2.3:a:atlassian:confluence:5.9.9:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
OR
     *cpe:2.3:a:atlassian:jira_integration_for_hipchat:6.26.0:*:*:*:*:*:*:*
     *cpe:2.3:a:atlassian:jira_integration_for_hipchat:6.26.10:*:*:*:*:*:*:*
     *cpe:2.3:a:atlassian:jira_integration_for_hipchat:6.29.1:*:*:*:*:*:*:*
     *cpe:2.3:a:atlassian:jira_integration_for_hipchat:6.29.2:*:*:*:*:*:*:*
     *cpe:2.3:a:atlassian:jira_integration_for_hipchat:6.31.0:*:*:*:*:*:*:*
     *cpe:2.3:a:atlassian:jira_integration_for_hipchat:7.1.0:*:*:*:*:*:*:*
     *cpe:2.3:a:atlassian:jira_integration_for_hipchat:7.2.1:*:*:*:*:*:*:*
     *cpe:2.3:a:atlassian:jira_integration_for_hipchat:7.3.2:*:*:*:*:*:*:*
     *cpe:2.3:a:atlassian:jira_integration_for_hipchat:7.3.3:*:*:*:*:*:*:*
     *cpe:2.3:a:atlassian:jira_integration_for_hipchat:7.4.1:*:*:*:*:*:*:*
     *cpe:2.3:a:atlassian:jira_integration_for_hipchat:7.8.1:*:*:*:*:*:*:*
     *cpe:2.3:a:atlassian:jira_integration_for_hipchat:7.8.12:*:*:*:*:*:*:*
     *cpe:2.3:a:atlassian:jira_integration_for_hipchat:7.8.3:*:*:*:*:*:*:*
Added CVSS V2

								
							
							
						
(AV:N/AC:L/Au:N/C:P/I:N/A:N)
Added CVSS V3

								
							
							
						
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Added CWE

								
							
							
						
CWE-200
Changed Reference Type
http://packetstormsecurity.com/files/139004/Atlassian-HipChat-Secret-Key-Disclosure.html No Types Assigned
http://packetstormsecurity.com/files/139004/Atlassian-HipChat-Secret-Key-Disclosure.html Third Party Advisory, VDB Entry
Changed Reference Type
http://www.securityfocus.com/archive/1/archive/1/539530/100/0/threaded No Types Assigned
http://www.securityfocus.com/archive/1/archive/1/539530/100/0/threaded Third Party Advisory, VDB Entry
Changed Reference Type
https://confluence.atlassian.com/bitbucketserver/bitbucket-server-security-advisory-2016-09-21-840698321.html No Types Assigned
https://confluence.atlassian.com/bitbucketserver/bitbucket-server-security-advisory-2016-09-21-840698321.html Vendor Advisory
Changed Reference Type
https://confluence.atlassian.com/doc/confluence-security-advisory-2016-09-21-849052104.html No Types Assigned
https://confluence.atlassian.com/doc/confluence-security-advisory-2016-09-21-849052104.html Vendor Advisory
Changed Reference Type
https://confluence.atlassian.com/jira/jira-and-hipchat-for-jira-plugin-security-advisory-2016-09-21-849052099.html No Types Assigned
https://confluence.atlassian.com/jira/jira-and-hipchat-for-jira-plugin-security-advisory-2016-09-21-849052099.html Vendor Advisory