CVE-2019-8449

CVE-2019-8449 针对Jira v8.3.4以下版本的利用 CVSS评分: 5.0 漏洞类型: 信息泄露 认证: 不需要 受影响版本: 2.1 - 8.3.4 发布日期: 2019-09-11 Exploit-DB: https://www.exploit-db.com/exploits/47990 描述 Jira 8.4.0之前版本中的/rest/api/latest/groupuserpicker资源允许远程攻击者通过信息泄露漏洞枚举用户名。 用法 root@kitploit: python CVE-2019-8449.py 链接...

Atlassian Jira Information Disclosure Vulnerability (CNVD-2019-32322)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. An information disclosure vulnerability exists in the /rest/api/latest/groupuserpicker resource in Atlassian Jira versions prior...

CVE-2019-8449

The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernames via an information disclosure vulnerability...

CVE-2019-8449

The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernames via an information disclosure vulnerability...

PT-2019-19047 · Atlassian · Jira

Name of the Vulnerable Software and Affected Versions: Jira versions prior to 8.4.0 Description: The issue concerns an information disclosure vulnerability in the /rest/api/latest/groupuserpicker resource. This allows remote attackers to enumerate usernames. Recommendations: For versions prior to...