Description
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view import source configuration information via a Broken Access Control vulnerability in the Insight Import Source feature. The affected versions are before version 4.21.0.
Remediation
References
Related Vulnerabilities
Magento Improper Authentication Vulnerability (CVE-2019-8108)
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-4304)
WordPress Plugin WP RSS Multi Importer Multiple Vulnerabilities (3.15)
WordPress Plugin WordPress Poll Multiple SQL Injection Vulnerabilities (33.5)