Lucene search
Security-metrics-botATLASSIAN:JRASERVER-70599HistoryFeb 04, 2020 - 11:21 p.m.
Information leak through broken access control in Jira Server and Data Center - CVE-2019-20407
2020-02-0423:21:37
security-metrics-bot
jira.atlassian.com
11
0.001 Low
EPSS
Percentile
50.9%
The ConfigureBambooRelease resource in Jira Software and Jira Software Data Center before version 8.6.1 allows authenticated remote attackers to view release version information in projects that they do not have access to through an missing authorisation check.
Related
cve
cve
CVE-2019-20407
2020-03-17 03:15:11
nvd
nvd
CVE-2019-20407
2020-03-17 03:15:11
nessus
nessus
Atlassian JIRA < 8.6.1 Information Disclosure
2020-03-20 00:00:00
cvelist
cvelist
CVE-2019-20407
2020-03-17 00:00:00
atlassian
atlassian
prion
prion
Authentication flaw
2020-03-17 03:15:00