Description

The API in Atlassian Jira Server and Data Center before version 8.6.0 allows authenticated remote attackers to determine project titles they do not have access to via an improper authorization vulnerability.

Remediation

References

CVE-2019-20404

Related Vulnerabilities

CubeCart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-47283)

WordPress Plugin Swift Landing Page Cross-Site Request Forgery (1.1)

Apache HTTP Server Other Vulnerability (CVE-2002-0843)

Apache Tomcat Other Vulnerability (CVE-2005-3510)

WordPress Plugin WP Affiliate Disclosure Security Bypass (1.1.3)

Severity

Medium

Classification

CVE-2019-20404 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities