CVE-2019-8445

CVE-2019-8445 is an Atlassian Jira worklog information disclosure vulnerability. TALOS reports that Jira versions 7.6.4 through 8.1.0 are affected and that authenticated users can view worklog details via the REST endpoint /rest/api/2/worklog/list due to a missing permissions check. The vulnerabi...

PT-2019-19043

Name of the Vulnerable Software and Affected Versions Jira versions prior to 7.13.7 Jira versions 8.0.0 through 8.3.1 Description The issue concerns a missing permissions check in several worklog rest resources in Jira, allowing remote attackers to view worklog time information. Recommendations F...