Description

The ConfigureBambooRelease resource in Jira Software and Jira Software Data Center before version 8.6.1 allows authenticated remote attackers to view release version information in projects that they do not have access to through an missing authorisation check.

Remediation

References

CVE-2019-20407

Related Vulnerabilities

Magento Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-28584)

MySQL CVE-2013-0384 Vulnerability (CVE-2013-0384)

Undertow Uncontrolled Resource Consumption Vulnerability (CVE-2022-2053)

WordPress Plugin CSV Importer Multiple Unspecified Vulnerabilities (0.3.7)

Jenkins Protection Mechanism Failure Vulnerability (CVE-2021-21690 )

Severity

Medium

Classification

CVE-2019-20407 CWE-862 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities