Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:JRASERVER-70884
HistoryApr 08, 2020 - 3:20 a.m.

Information Disclosure in comment restriction feature - CVE-2019-20410

2020-04-0803:20:53
security-metrics-bot
jira.atlassian.com
59

0.004 Low

EPSS

Percentile

74.3%

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view sensitive information via an Information Disclosure vulnerability in the comment restriction feature.

Affected versions:

  • version < 7.6.17
  • 7.7.0 ≤ version < 7.13.9
  • 8.0.0 ≤ version < 8.4.2

Fixed versions:

  • 7.6.17
  • 7.13.9
  • 8.4.2
  • 8.5.0

0.004 Low

EPSS

Percentile

74.3%

Related for ATLASSIAN:JRASERVER-70884