CVE-2019-8449

CVE-2019-8449 CVE-2019-8449 Exploit for Jira Releases Below v8.3.4 CVSS Score: 5.0 Vulnerability Types: Information Disclosure Authentication: Not Required Affected Versions: 2.1 - 8.3.4 Publish Date: 2019-09-11 Exploit-DB: https://www.exploit-db.com/exploits/47990 Description The...

Atlassian Jira Information Disclosure Vulnerability (CNVD-2019-32322)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. An information disclosure vulnerability exists in the /rest/api/latest/groupuserpicker resource in Atlassian Jira versions prior...

CVE-2019-8449

The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernames via an information disclosure vulnerability...

CVE-2019-8449

The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernames via an information disclosure vulnerability...

CVE-2019-8449: Missing Authentication for Critical Function

The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernames via an information disclosure vulnerability...

PT-2019-19047 · Atlassian · Jira

Name of the Vulnerable Software and Affected Versions: Jira versions prior to 8.4.0 Description: The issue concerns an information disclosure vulnerability in the /rest/api/latest/groupuserpicker resource. This allows remote attackers to enumerate usernames. Recommendations: For versions prior to...