Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:BAM-20745
HistoryDec 17, 2019 - 4:10 a.m.

Information disclosure in the listEntityLinks servlet resource of the Application links plugin - CVE-2019-15011

2019-12-1704:10:25
security-metrics-bot
jira.atlassian.com
55

0.001 Low

EPSS

Percentile

22.9%

The version of the Application Links plugin used in Bamboo before version 6.8.2 allows remote attackers to obtain information about configured application links via a missing permissions check. See https://ecosystem.atlassian.net/browse/APL-1386 for more details.

CPENameOperatorVersion
bamboolt6.8.2
bamboole6.0.5
bamboolt6.9.0

0.001 Low

EPSS

Percentile

22.9%