CVE-2020-36233

—

CVSS 3.1

7.8 high

EPSS

<1%p18

Published

Feb 18, 2021 (Feb 18, 2021)

Modified

Jun 17, 2026

Description

The Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before version 6.10.9, 7.x before 7.6.4, and from version 7.7.0 before 7.10.1 allows local attackers to escalate privileges because of weak permissions on the installation directory.

Vendors: atlassian
Products: bitbucket
Weakness: CWE-276
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.