Lucene search
Security-metrics-botATLASSIAN:CONFSERVER-59277HistoryDec 17, 2019 - 4:10 a.m.
Information disclosure in the listEntityLinks servlet resource of the Application links plugin - CVE-2019-15011
2019-12-1704:10:27
security-metrics-bot
jira.atlassian.com
60
0.001 Low
EPSS
Percentile
22.9%
The version of the Application Links plugin used in Confluence before version 6.13.6, from version 6.14.0 before version 6.15.5, and from version 7.0.0 before 7.0.1 allows remote attackers to obtain information about configured application links via a missing permissions check. See https://ecosystem.atlassian.net/browse/APL-1386 for more details.
Related
cve
cve
CVE-2019-15011
2019-12-17 04:15:11
CVE-2019-20417
2020-07-02 01:15:11
atlassian
atlassian
prion
prion
Design/Logic Flaw
2019-12-17 04:15:00
cvelist
cvelist
CVE-2019-15011
2019-12-17 00:00:00
nvd
nvd
CVE-2019-15011
2019-12-17 04:15:11
CVE-2019-20417
2020-07-02 01:15:11
symantec
symantec
nessus
nessus
Atlassian JIRA < 8.4.2 Information disclosure in Application links plugin
2019-12-20 00:00:00