Information disclosure

2020-06-2906:15:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.3%

JSON

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view sensitive information via an Information Disclosure vulnerability in the comment restriction feature. The affected versions are before version 7.6.17, from version 7.7.0 before 7.13.9, and from version 8.0.0 before 8.4.2.

CPENameOperatorVersion
jiralt7.6.17
jira_data_centerge7.7.0
jira_data_centerlt7.13.9
jira_data_centerge8.0.0
jira_data_centerlt8.4.2
jira_serverge8.0.0
jira_serverlt8.4.2
jira_serverge7.7.0
jira_serverlt7.13.9
jira_software_data_centerlt7.6.17

Name	Operator	Version
jira	lt	7.6.17
jira_data_center	ge	7.7.0
jira_data_center	lt	7.13.9
jira_data_center	ge	8.0.0
jira_data_center	lt	8.4.2
jira_server	ge	8.0.0
jira_server	lt	8.4.2
jira_server	ge	7.7.0
jira_server	lt	7.13.9
jira_software_data_center	lt	7.6.17

References

jira.atlassian.com/browse/JRASERVER-70884