CVE-2018-13399

—

CVSS 3.0

7.8 high

EPSS

<1%p17

Published

Oct 16, 2018 (Oct 16, 2018)

Modified

Jun 17, 2026

Description

The Microsoft Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows local attackers to escalate privileges because of weak permissions on the installation directory.

Vendors: atlassian
Products: crucible, fisheye
Weakness: CWE-732
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.