Atlassian Jira 8.0.0 < 8.0.4 Multiple Vulnerabilities

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is version 7.13.0 prior to 7.13.4, 8.0.0 prior to 8.0.4 or 8.1.0 prior to 8.1.1. It is, therefore, affected by multiple vulnerabilities: - A vulnerability which permits remote attackers w...

CVE-2019-3403: Incorrect Authorization

The /rest/api/2/user/picker rest resource in Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check...

PT-2019-16560

Name of the Vulnerable Software and Affected Versions Jira versions prior to 7.13.3 Jira versions 8.0.0 through 8.0.3 Jira versions 8.1.0 Description The issue concerns an incorrect authorization check in the "/rest/api/2/user/picker" API endpoint, allowing remote attackers to enumerate usernames...