Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:FE-7254
HistoryDec 17, 2019 - 4:10 a.m.

Information disclosure in the listEntityLinks servlet resource of the Application links plugin - CVE-2019-15011

2019-12-1704:10:30
security-metrics-bot
jira.atlassian.com
64

0.001 Low

EPSS

Percentile

22.9%

The version of the Application Links plugin used in Fisheye before version 4.7.1 allows remote attackers to obtain information about configured application links via a missing permissions check. See https://ecosystem.atlassian.net/browse/APL-1386 for more details.

CPENameOperatorVersion
fisheyelt4.8.0
fisheyelt4.7.1
fisheyeleN/A

0.001 Low

EPSS

Percentile

22.9%