Vulners
Lucene search
2 matches found
Authentication flaw
The ConfigureBambooRelease resource in Jira Software and Jira Software Data Center before version 8.6.1 allows authenticated remote attackers to view release version information in projects that they do not have access to through an missing authorisation check...
4CVSS4.4AI score0.01198EPSS
SaveExploits0References1Affected Software2
Information leak through broken access control in Jira Server and Data Center - CVE-2019-20407
The ConfigureBambooRelease resource in Jira Software and Jira Software Data Center before version 8.6.1 allows authenticated remote attackers to view release version information in projects that they do not have access to through an missing authorisation check...
4.3CVSS5.6AI score0.01198EPSS
SaveExploits0Affected Software1
20