Description

Atlassian Jira Server and Data Center in affected versions allows remote attackers to modify logging and profiling settings via a cross-site request forgery (CSRF) vulnerability. The affected versions are before version 7.13.3, and from version 8.0.0 before 8.1.0.

Remediation

References

CVE-2019-20415

Related Vulnerabilities

Internet Information Services Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2002-0422)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-7414)

Oracle JRE CVE-2012-0547 Vulnerability (CVE-2012-0547)

WordPress Plugin Advanced Page Manager Cross-Site Scripting (1.4.1)

WordPress Plugin WP Human Resource Management Security Bypass (2.2.14)

Severity

Medium

Classification

CVE-2019-20415 CWE-352

Tags

Missing Update Known Vulnerabilities