CVE-2006-3339

Published: Jul 3, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

secure/ConfigureReleaseNote.jspa in Atlassian JIRA 3.6.2-#156 allows remote attackers to obtain sensitive information via unspecified manipulations of the projectId parameter, which displays the installation path and other system information in an error message.

Affected (1)

Products: Atlassian: Jira

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Atlassian Jira	Version 3.6.2_156

References (10)

http://jira.atlassian.com/browse/JRA-10542

Source: cve@mitre.org

http://pridels0.blogspot.com/2006/06/atlassian-jira-information-disclosure.html

Source: cve@mitre.org

http://www.osvdb.org/26745

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2472

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/27235

Source: cve@mitre.org

http://jira.atlassian.com/browse/JRA-10542

Source: af854a3a-2127-422b-91ae-364da2661108

http://pridels0.blogspot.com/2006/06/atlassian-jira-information-disclosure.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/26745

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/2472

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/27235

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.