Description

The login.jsp resource in Jira before version 7.13.4, and from version 8.0.0 before version 8.2.2 allows remote attackers to enumerate usernames via an information disclosure vulnerability.

Remediation

References

CVE-2019-8448

Related Vulnerabilities

WordPress Plugin WP Maps-Display Google Maps Perfectly with Ease Unspecified Vulnerability (3.1.6)

PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-2097)

WordPress Plugin Stylish Price List Security Bypass (6.9.0)

WordPress Plugin Tabs Cross-Site Scripting (1.8.0)

WordPress Plugin WP Super Cache Cache Poisoning (1.8)

Severity

Medium

Classification

CVE-2019-8448 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities