Description

The login.jsp resource in Jira before version 7.13.4, and from version 8.0.0 before version 8.2.2 allows remote attackers to enumerate usernames via an information disclosure vulnerability.

Remediation

References

CVE-2019-8448

Related Vulnerabilities

e107 Other Vulnerability (CVE-2006-2591)

WordPress Plugin Asgaros Forum Cross-Site Scripting (1.0.7)

OpenSSL CVE-2014-3511 Vulnerability (CVE-2014-3511)

WordPress Deserialization of Untrusted Data Vulnerability (CVE-2018-20148)

MySQL CVE-2020-14771 Vulnerability (CVE-2020-14771)

Severity

Medium

Classification

CVE-2019-8448 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities