Description

The ManageFilters.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check.

Remediation

References

CVE-2019-3401

Related Vulnerabilities

PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-1914)

WordPress Plugin WP Support Plus Responsive Ticket System Multiple Vulnerabilities (4.1)

IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2865)

WordPress Plugin Embed PDF Cross-Site Scripting (1.0.6)

LimeSurvey Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2025-41076)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-863 CVE-2019-3401