CVE-2016-6668 – Atlassian HipChat Secret Key Disclosure

https://notcve.org/view.php?id=CVE-2016-6668

06 Oct 2016 — The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before 7.3.7, and 7.4.0 before 7.8.17; Confluence HipChat plugin 6.26.0 before 7.8.17; and HipChat for JIRA plugin 6.26.0 before 7.8.17 allows remote attackers to obtain the secret key for communicating with HipChat instances by reading unspecified pages. El Atlassian Hipchat Integration Plugin para Bitbucket Server 6.26.0 en versiones anteriores a 6.27.5, 6.28.0 en versiones anteriores a 7.3.7 y 7.4.0 en versiones an... • http://packetstormsecurity.com/files/139004/Atlassian-HipChat-Secret-Key-Disclosure.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •