Authorization

2020-07-0102:15:00

PRIOn knowledge base

www.prio-n.com

5.1 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.6%

JSON

The UniversalAvatarResource.getAvatars resource in Jira Server and Data Center before version 8.9.0 allows remote attackers to obtain information about custom project avatars names via an Improper authorization vulnerability.

CPENameOperatorVersion
jiralt8.9.0
jira_software_data_centerlt8.9.0

CPE	Name	Operator	Version
	jira	lt	8.9.0
	jira_software_data_center	lt	8.9.0

References

jira.atlassian.com/browse/JRASERVER-71185