Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to access sensitive information without being authenticated in the Global permissions screen. The affected versions are before version 8.8.0.

Remediation

References

CVE-2019-20898

Related Vulnerabilities

osTicket CVE-2018-7195 Vulnerability (CVE-2018-7195)

WordPress Plugin Async JavaScript Cross-Site Scripting (2.20.12.09)

WordPress Plugin WP Customize Login Cross-Site Scripting (1.1)

Drupal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-13662)

MySQL CVE-2020-14632 Vulnerability (CVE-2020-14632)

Severity

High

Classification

CVE-2019-20898

Tags

Missing Update Known Vulnerabilities