Description

The API in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to determine if a Jira project key exists or not via an information disclosure vulnerability.

Remediation

References

CVE-2019-20403

Related Vulnerabilities

Atlassian Jira Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-20897)

Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-5342)

WordPress Plugin RegistrationMagic-Custom Registration Forms, User Registration, Payment, and User Login Multiple Vulnerabilities (4.6.0.1)

Python Integer Overflow or Wraparound Vulnerability (CVE-2008-1679)

WordPress Plugin Image Source Control Security Bypass (2.3.0)

Severity

Medium

Classification

CVE-2019-20403 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities