Details
-
Type:
Bug
-
Status: Closed (View Workflow)
-
Priority:
Low
-
Resolution: Fixed
-
Affects Version/s: 8.4.1
-
Component/s: Issue - Comments
-
Fixed in Long Term Support Release/s:
-
Introduced in Version:8.04
-
Support reference count:1
-
Symptom Severity:Severity 2 - Major
-
Bug Fix Policy:
Description
Comment properties in Atlassian Jira Server and Data Center before version 7.13.12, from 8.0.0 before version 8.5.4, and 8.6.0 before version 8.6.1 allows remote attackers to make comments on a ticket to which they do not have commenting permissions via a broken access control bug.