Spoofing

2021-02-0200:15:00

PRIOn knowledge base

www.prio-n.com

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.5%

JSON

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view the metadata of boards they should not have access to via an Insecure Direct Object References (IDOR) vulnerability. The affected versions are before version 8.5.10, and from version 8.6.0 before 8.13.2.

CPENameOperatorVersion
jiralt8.5.10
jira_data_centereq8.13.3
jira_data_centerge8.6.0
jira_data_centerlt8.13.2
jira_serverge8.6.0
jira_serverlt8.13.2
jira_servereq8.13.3
jira_software_data_centerlt8.5.10

Name	Operator	Version
jira	lt	8.5.10
jira_data_center	eq	8.13.3
jira_data_center	ge	8.6.0
jira_data_center	lt	8.13.2
jira_server	ge	8.6.0
jira_server	lt	8.13.2
jira_server	eq	8.13.3
jira_software_data_center	lt	8.5.10

References

jira.atlassian.com/browse/JRASERVER-72002