Starbucks: Information disclosure on sim.starbucks.com

🗓️ 30 Jun 2019 12:11:42Reported by johnstoneType

hackerone

hackerone🔗 hackerone.com👁 149 Views

Information disclosure on sim.starbucks.com, Jira server version 7.9.2, CVE-2019-3403, CVE-2019-844

Reporter	Title	Published	Views	Family All 32
GithubExploit	Exploit for Incorrect Authorization in Atlassian Jira	18 Mar 202122:36	–	githubexploit
Atlassian	Lax path access check allowing access to webroot files in the META-INF directory in the CachingResourceDownloadRewriteRule class - CVE-2019-8442	29 Apr 201903:50	–	atlassian
Atlassian	Information disclosure in the /rest/api/2/user/picker rest resource - CVE-2019-3403	29 Apr 201903:57	–	atlassian
Atlassian	Lax path access check allowing access to webroot files in the META-INF directory in the CachingResourceDownloadRewriteRule class - CVE-2019-8442	29 Apr 201903:50	–	atlassian
Atlassian	Information disclosure in the /rest/api/2/user/picker rest resource - CVE-2019-3403	29 Apr 201903:57	–	atlassian
Circl	CVE-2019-3403	22 May 201918:48	–	circl
Circl	CVE-2019-8442	22 May 201918:48	–	circl
CNVD	Atlassian JIRA Information Disclosure Vulnerability (CNVD-2019-15739)	22 May 201900:00	–	cnvd
CNVD	Atlassian Jira Username Enumeration Vulnerability	23 May 201900:00	–	cnvd
CVE	CVE-2019-3403	22 May 201917:35	–	cve

13 Nov 2019 00:41Current

0.7Low risk

Vulners AI Score0.7

EPSS0.93136

starbucks information disclosure jira server vulnerability user enumeration server information update needed bug bounty impact