Loading...

XML

Word

Printable

Details

Type: Bug
Resolution: Fixed
Priority: Low
Fix Version/s: 8.9.0
Affects Version/s: 8.5.1
Component/s: Project Administration - Others
Labels:

Introduced in Version:
8.05
Symptom Severity:
Severity 2 - Major
Bug Fix Policy:
View Atlassian Server bug fix policy

Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to obtain information about custom project avatars via an improper authorization vulnerability in the UniversalAvatarResource.getAvatars resource.

Affected versions:

version < 8.9.0

Fixed versions:

8.9.0

Attachments

Issue Links

mentioned in: Page Loading...; Page Loading...; Page Loading...

Activity

People

Assignee:: Unassigned

Reporter:: Security Metrics Bot

Votes:: 0 Vote for this issue

Watchers:: 9 Start watching this issue

Dates

Due:: 14/Sep/2020

Created:: 16/Jun/2020 3:04 AM

Updated:: 08/Mar/2021 3:50 PM

Resolved:: 17/Jun/2020 3:36 AM