Description

secure/ConfigureReleaseNote.jspa in Atlassian JIRA 3.6.2-#156 allows remote attackers to obtain sensitive information via unspecified manipulations of the projectId parameter, which displays the installation path and other system information in an error message.

Remediation

References

CVE-2006-3339

Related Vulnerabilities

WordPress 5.6.x Multiple Vulnerabilities (5.6 - 5.6.12)

phpBB Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-5501)

PostgreSQL Numeric Errors Vulnerability (CVE-2010-4015)

TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3672)

MySQL CVE-2021-2031 Vulnerability (CVE-2021-2031)

Severity

Medium

Classification

CVE-2006-3339

Tags

Missing Update Known Vulnerabilities