Authentication flaw

An issue was discovered in the Infosysta "In-App & Desktop Notifications" app 1.6.13J8 for Jira. By using plugins/servlet/nfj/PushNotification?username= with a modified username, a different user's notifications can be read without authentication/authorization. These notifications are then no...

Design/Logic Flaw

An issue was discovered in the Infosysta "In-App & Desktop Notifications" app 1.6.13J8 for Jira. It is possible to obtain a list of all valid Jira usernames without authentication/authorization via the plugins/servlet/nfj/UserFilter?searchQuery=@ URI...

CVE-2019-16907

CVE-2019-16907 affects Infosysta In-App & Desktop Notification for Jira (version 1.6.13_J8). The vulnerability enables an unauthenticated/user-discovery disclosure: an attacker can obtain a list of valid Jira usernames through the URL plugins/servlet/nfj/UserFilter?searchQuery=@ without authoriza...

CVE-2019-16907

An issue was discovered in the Infosysta "In-App & Desktop Notifications" app 1.6.13J8 for Jira. It is possible to obtain a list of all valid Jira usernames without authentication/authorization via the plugins/servlet/nfj/UserFilter?searchQuery=@ URI...

CVE-2019-16906

CVE-2019-16906 concerns Infosysta In-App & Desktop Notifications for Jira (v1.6.13_J8). Affected component is the PushNotification functionality exposed via plugins/servlet/nfj/PushNotification?username=, allowing an attacker to read another user’s notifications without authentication/authorizati...

CVE-2019-16906

An issue was discovered in the Infosysta "In-App & Desktop Notifications" app 1.6.13J8 for Jira. By using plugins/servlet/nfj/PushNotification?username= with a modified username, a different user's notifications can be read without authentication/authorization. These notifications are then no...

Infosysta In-App&Desktop Notification for Jira Authentication Bypass Vulnerability

Infosysta In-App&Desktop Notification for Jira is an email notification plugin for the Jira defect tracking management system from Infosysta Lebanon. An authentication bypass vulnerability exists in Infosysta In-App&Desktop Notification for Jira version 1.6.13J8, which can be exploited by an...

Infosysta In-App&Desktop Notification for Jira Information Disclosure Vulnerability

Infosysta In-App&Desktop Notification for Jira is an email notification plugin for the Jira defect tracking management system from Infosysta Lebanon. An information disclosure vulnerability exists in Infosysta In-App&Desktop Notification for Jira version 1.6.13J8, which can be exploited by an...

Infosysta Jira 1.6.13_J8 Project List Authentication Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2019-042 Product: In-App & Desktop Notification for Jira Manufacturer: Infosysta Affected Versions: 1.6.13J8 Tested Versions: 1.6.13J8 Vulnerability Type: Authentication/Authorization Bypass Risk Level: Medium Solution Status: Clos...

Infosysta Jira 1.6.13_J8 Push Notification Authentication Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2019-041 Product: In-App & Desktop Notification for Jira Manufacturer: Infosysta Affected Versions: 1.6.13J8 Tested Versions: 1.6.13J8 Vulnerability Type: Authentication/Authorization Bypass Risk Level: High Solution Status: Closed...

Infosysta Jira 1.6.13_J8 User Name Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2019-043 Product: In-App & Desktop Notification for Jira Manufacturer: Infosysta Affected Versions: 1.6.13J8 Tested Versions: 1.6.13J8 Vulnerability Type: Authentication/Authorization Bypass Risk Level: Medium Solution Status: Clos...