Loading...

XML

Word

Printable

Details

Type: Bug
Resolution: Fixed
Priority: Low
Fix Version/s: 8.6.0, 8.5.5
Affects Version/s: 7.13.5, 8.2.4
Component/s: Jira Importers Plugin
Labels:

Fixed in Long Term Support Release/s:

Download 8.5
Introduced in Version:
7.13
Symptom Severity:
Severity 2 - Major
Bug Fix Policy:
View Atlassian Server bug fix policy

Description

The API in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to determine if a Jira project key exists or not via an information disclosure vulnerability.

Attachments

Issue Links

mentioned in: Page Loading...; Page Loading...

Activity

People

Assignee:: Unassigned

Reporter:: Security Metrics Bot

Votes:: 0 Vote for this issue

Watchers:: 9 Start watching this issue

Dates

Due:: 25/Mar/2020

Created:: 29/Jan/2020 11:27 PM

Updated:: 18/Mar/2022 5:09 AM

Resolved:: 30/Jan/2020 9:29 PM