Description

The ManageFilters.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check.

Remediation

References

CVE-2019-3401

Related Vulnerabilities

WordPress Inadequate Encryption Strength Vulnerability (CVE-2012-6707)

MediaWiki CVE-2023-45370 Vulnerability (CVE-2023-45370)

e107 Other Vulnerability (CVE-2004-2028)

Oracle Application Server CVE-2009-0994 Vulnerability (CVE-2009-0994)

Mailman Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2021-42096)

Severity

Medium

Classification

CVE-2019-3401 CWE-863

Tags

Missing Update Known Vulnerabilities