Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to access sensitive information without being authenticated in the Global permissions screen. The affected versions are before version 8.8.0.

Remediation

References

CVE-2019-20898

Related Vulnerabilities

WordPress Plugin WP Marketplace TimThumb Arbitrary File Upload (1.1.0)

Oracle Database Server Other Vulnerability (CVE-2005-3440)

WordPress Plugin WP Athletics SQL Injection (1.1.7)

Nginx Other Vulnerability (CVE-2016-0742)

WordPress Plugin SpiderCatalog Unspecified Vulnerability (1.6.8)

Severity

High

Classification

CVE-2019-20898

Tags

Missing Update Known Vulnerabilities