← Back

CVE-2019-20101

nvd nist
Published: Sep 14, 2021Modified: Nov 21, 2024

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 3.9 / Impact: 1.4
Source: NVD

Description

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view whitelist rules via a Broken Access Control vulnerability in the /rest/whitelist/<version>/check endpoint. The affected versions are before version 8.13.3, and from version 8.14.0 before 8.14.1.

Affected (4)

Atlassian
2 products
Data Center
Jira
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Atlassian
Data Center
Before 8.13.3
Data Center
Version 8 14
Atlassian
Jira
Before 8.13.3
Jira
Version 8 14.0

References (4)

Source: security@atlassian.com
Issue TrackingVendor Advisory
Source: security@atlassian.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.