CVE Series: Atlassian Bitbucket Command Injection (CVE-2022-36804)
|
The Atlassian Bitbucket command injection flaw (CVE-2022-36804) is a remote, unauthenticated, command injection vulnerability affecting application programming interface (API) endpoints in Bitbucket Server and Data Center. Stop an attacker from stealing sensitive information or installing malware as you exploit and mitigate this vulnerability!
Course Description
The Atlassian Bitbucket command injection flaw (CVE-2022-36804) is a remote, unauthenticated, command injection vulnerability affecting multiple application programming interface (API) endpoints in Bitbucket Server and Data Center. An attacker could send a specially crafted request to the server to execute arbitrary code, potentially gaining control of the server to steal sensitive information or install malware. With the increased use of APIs within applications it’s imperative for organizations to understand potential attack vectors and how to protect themselves. In this course, learn how to exploit and mitigate this critical vulnerability!
This course is for seasoned red teamers, penetration testers, security and vulnerability assessment analysts, and system administrators who want to know how to exploit and protect against the latest vulnerabilities impacting enterprise systems. Basic knowledge of Python as a programming language as well as functional knowledge of web applications.
By the end of this course, you should be able to:
Your instructor, Clint Kehr, is a technical manager for a financial services company’s Responsible Disclosure Team, where he interacts with ethical hackers who find vulnerabilities in the company’s infrastructure. Clint is a former Special Agent with the Department of Justice, where he specialized in internet investigations and conducted numerous cases on cyber threat actors on the surface, deep, and dark web, resulting in Clint earning the Attorney General’s Distinguished Service Award.
Who Should Take This Course?
Define the vulnerability, describe its root cause, and communicate its significance to key organizational stakeholders.
Exploit this vulnerability using publicly available exploit code.
Your instructor, Clint Kehr, is a technical manager for a financial services company’s Responsible Disclosure Team, where he interacts with ethical hackers who find vulnerabilities in the company’s infrastructure. Clint is a former Special Agent with the Department of Justice, where he specialized in internet investigations and conducted numerous cases on cyber threat actors on the surface, deep, and dark web, resulting in Clint earning the Attorney General’s Distinguished Service Award.
Module 1: Atlassian Bitbucket Vulnerability Exploitation and Mitigation
