Description

The Setup Wizard in Atlassian JIRA Enterprise Edition before 3.12.1 does not properly restrict setup attempts after setup is complete, which allows remote attackers to change the default language.

Remediation

References

CVE-2007-6619

Related Vulnerabilities

Oracle Database Server Incorrect Default Permissions Vulnerability (CVE-2024-21123)

WordPress Plugin Spiffy Calendar SQL Injection (4.9.11)

Magento CVE-2019-7876 Vulnerability (CVE-2019-7876)

WordPress Plugin Dokan-Best WooCommerce Multivendor Marketplace Solution-Build Your Own Amazon, eBay, Etsy Cross-Site Request Forgery (3.0.8)

Moodle Other Vulnerability (CVE-2005-3648)

Severity

High

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-2007-6619