CVE-2019-20407

CVE-2019-20407 affects Jira Software and Jira Software Data Center (ConfigureBambooRelease resource) prior to version 8.6.1. An authenticated remote attacker can view release version information in projects to which they should not have access due to a missing authorization check. The issue is do...

Information leak through broken access control in Jira Server and Data Center - CVE-2019-20407

The ConfigureBambooRelease resource in Jira Software and Jira Software Data Center before version 8.6.1 allows authenticated remote attackers to view release version information in projects that they do not have access to through an missing authorisation check...

Information leak through broken access control in Jira Server and Data Center - CVE-2019-20407

The ConfigureBambooRelease resource in Jira Software and Jira Software Data Center before version 8.6.1 allows authenticated remote attackers to view release version information in projects that they do not have access to through an missing authorisation check...