PT-2019-14860

Name of the Vulnerable Software and Affected Versions Infosysta In-App & Desktop Notifications app versions prior to 1.6.14 J8 for Jira Description An issue in the Infosysta In-App & Desktop Notifications app allows an authenticated Jira user to obtain a list of all Jira projects without proper...

CVE-2019-16909: Missing Authorization

An issue was discovered in the Infosysta "In-App & Desktop Notifications" app before 1.6.14J8 for Jira. It is possible to obtain a list of all Jira projects with authentication as a Jira user, but without authorization for specific projects via the plugins/servlet/nfj/NotificationSettings URI...