Lucene search
PRIOn knowledge basePRION:CVE-2019-15013HistoryDec 18, 2019 - 4:15 a.m.
Authentication flaw
2019-12-1804:15:00
PRIOn knowledge base
www.prio-n.com
2
The WorkflowResource class removeStatus method in Jira before version 7.13.12, from version 8.0.0 before version 8.4.3, and from version 8.5.0 before version 8.5.2 allows authenticated remote attackers who do not have project administration access to remove a configured issue status from a project via a missing authorisation check.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jira | lt | 7.13.12 | |
| jira_server | ge | 8.5.0 | |
| jira_server | lt | 8.5.2 | |
| jira_server | ge | 8.0.0 | |
| jira_server | lt | 8.4.3 |
Related
atlassian
atlassian
cve
cve
CVE-2019-15013
2019-12-18 04:15:14
nessus
nessus
cvelist
cvelist
CVE-2019-15013
2019-12-18 00:00:00
nvd
nvd
CVE-2019-15013
2019-12-18 04:15:14
symantec
symantec
Atlassian JIRA CVE-2019-15013 Authorization Bypass Vulnerability
2019-12-16 00:00:00