PT-2019-17475 · Atlassian · Jira Tempo Plugin

Ben Taylor · Published 2019-10-31 · Updated 2019-11-04 · CVE-2019-5095

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Atlassian Jira Tempo plugin version 4.10.0

Description A summary information disclosure issue exists, allowing authenticated users to obtain summaries of issues they do not have permission to view via the Tempo plugin.

Recommendations For Atlassian Jira Tempo plugin version 4.10.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2019-5095

Affected Products

Jira Tempo Plugin

References · 3

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2019-0838 · Exploit
• https://osv.dev/vulnerability/CVE-2019-5095 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5095 · Security Note