PT-2019-17475 · Atlassian · Jira Tempo Plugin

Ben Taylor · Publicado 2019-10-31 · Atualizado 2019-11-04 · CVE-2019-5095

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Atlassian Jira Tempo plugin version 4.10.0

Description A summary information disclosure issue exists, allowing authenticated users to obtain summaries of issues they do not have permission to view via the Tempo plugin.

Recommendations For Atlassian Jira Tempo plugin version 4.10.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2019-5095

Produtos afetados

Jira Tempo Plugin

Referências · 3

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2019-0838 · Exploit
• https://osv.dev/vulnerability/CVE-2019-5095 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-5095 · Nota de Segurança