PT-2019-19044 · Atlassian · Jira

Ben Taylor · Publicado 2019-08-23 · Atualizado 2022-03-28 · CVE-2019-8446

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Jira versions prior to 8.3.2

Description The issue concerns an incorrect authorization check in the /rest/issueNav/1/issueTable resource, allowing remote attackers to enumerate usernames.

Recommendations For versions prior to 8.3.2, update to version 8.3.2 or later to resolve the issue.

Exploit

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2019-8446

Produtos afetados

Jira

Referências · 4

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2019-0839 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-8446 · Nota de Segurança
• https://jira.atlassian.com/browse/JRASERVER-69777 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-8446 · Aviso do Fabricante