Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:JRASERVER-70882
HistoryApr 08, 2020 - 3:06 a.m.

Improper authentication on Convert Sub-Task to Issue page - CVE-2019-20412

2020-04-0803:06:05
security-metrics-bot
jira.atlassian.com
51

0.002 Low

EPSS

Percentile

51.6%

The Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate the following informationΒ via an Improper Authentication vulnerability:

  • Workflow names
  • Project Key, if it is part of the workflow name
  • Issue Keys
  • Issue Types
  • Status Types

Affected versions:

  • version < 7.13.9
  • 7.14.0 ≀ version < 8.4.2

Fixed versions:

  • 7.13.9
  • 8.4.2
  • 8.5.0

0.002 Low

EPSS

Percentile

51.6%

Related for ATLASSIAN:JRASERVER-70882