[JRASERVER-70570] JMX monitoring flag in Jira was vulnerable to XSRF/CSRF - CVE-2019-20405 - Create and track feature requests for Atlassian products.

Type: Bug
Resolution: Fixed
Priority: Low (View bug fix roadmap)
Fix Version/s: 8.6.0
Affects Version/s: 7.13.0
Component/s: System Administration - Secure Administrator Sessions
Labels:
- advisory
- advisory-released
- bugbounty
- csrf
- cve-2019-20405
- cvss-low
- security

Introduced in Version:
7.13
Symptom Severity:
Severity 3 - Minor
Bug Fix Policy:
View Atlassian Server bug fix policy

The JMX monitoring flag in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to turn the JMX monitoring flag off or on via a Cross-site request forgery (CSRF) vulnerability.

mentioned in: Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...

(1 mentioned in)

Assignee:: Unassigned

Reporter:: Security Metrics Bot

Affected customers:: 0 This affects my team

Watchers:: 8 Start watching this issue

Created:: 30/Jan/2020 10:24 PM

Updated:: 13/May/2021 3:43 PM

Resolved:: 31/Jan/2020 6:45 PM

Details

Description

Attachments

Issue Links

Forms

Activity

[JRASERVER-70570] JMX monitoring flag in Jira was vulnerable to XSRF/CSRF - CVE-2019-20405

People

Dates