Spoofing

2020-07-1305:15:00

PRIOn knowledge base

www.prio-n.com

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.5%

JSON

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view titles of a private project via an Insecure Direct Object References (IDOR) vulnerability in the Administration Permission Helper. The affected versions are before version 7.13.6, from version 8.0.0 before 8.5.7, from version 8.6.0 before 8.9.2, and from version 8.10.0 before 8.10.1.

CPENameOperatorVersion
jiralt7.13.16
jira_data_centerge8.0.0
jira_data_centerlt8.5.7
jira_data_centereq8.10.0
jira_data_centerge8.6.0
jira_data_centerlt8.9.2
jira_serverge8.0.0
jira_serverlt8.5.7
jira_serverge8.6.0
jira_serverlt8.9.2

Name	Operator	Version
jira	lt	7.13.16
jira_data_center	ge	8.0.0
jira_data_center	lt	8.5.7
jira_data_center	eq	8.10.0
jira_data_center	ge	8.6.0
jira_data_center	lt	8.9.2
jira_server	ge	8.0.0
jira_server	lt	8.5.7
jira_server	ge	8.6.0
jira_server	lt	8.9.2