CVE-2022-26133
Assigner: atlassian
Published: 2022-03-24T00:00:00
State: PUBLISHED
affected: product: Bitbucket Data Center
vendor: Atlassian
versions: lessThan: unspecified
status: affected
version: 5.14.0
versionType: custom
lessThan: 7.6.14
status: affected
version: unspecified
versionType: custom
lessThan: unspecified
status: affected
version: 7.7.0
versionType: custom
lessThan: 7.17.6
status: affected
version: unspecified
versionType: custom
lessThan: unspecified
status: affected
version: 7.18.0
versionType: custom
lessThan: 7.18.4
status: affected
version: unspecified
versionType: custom
lessThan: unspecified
status: affected
version: 7.19.0
versionType: custom
lessThan: 7.19.4
status: affected
version: unspecified
versionType: custom
status: affected
version: 7.20.0
datePublic: 2022-03-24T00:00:00
descriptions: value: SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later before 7.6.14, 7.7.0 and later prior to 7.17.6, 7.18.0 and later prior to 7.18.4, 7.19.0 and later prior to 7.19.4, and 7.20.0 allow a remote, unauthenticated attacker to execute arbitrary code via Java deserialization.
problemTypes: descriptions: description: Deserialization of untrusted data
type: text