Customers created via the Customer Portal do not trigger an email verification

2020-04-0104:07:50

security-metrics-bot

jira.atlassian.com

JSON

In affected versions of Jira Service Desk Server and Data Centre, it was possible to create customers with fake email addresses via the Customer Portal. This is now resolved with email verification.

Affected versions:

version < 3.16.13
4.0.0 ≤ version < 4.5.3
4.6.0 ≤ version < 4.7.0

Fixed versions:

3.16.13
4.5.3
4.7.0

Affected configurations

Vulners

Node

atlassianjira_service_managementRange≤4.5.5data_center

atlassianjira_service_managementRange<4.7.0data_center

atlassianjira_service_managementRange<4.5.3data_center

atlassianjira_service_managementRange<3.16.13data_center

VendorProductVersionCPE
atlassianjira_service_management*cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:data_center:*:*:*

Vendor	Product	Version	CPE
atlassian	jira_service_management	*	cpe:2.3:a:atlassian:jira_service_management:::::data_center:::*

JSON