The JMX monitoring flag in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to turn the JMX monitoring flag off or on via a Cross-site request forgery (CSRF) vulnerability.
CPE | Name | Operator | Version |
---|---|---|---|
jira server and data center | le | 7.13.0 | |
jira server and data center | lt | 8.6.0 |