Loading...

XML

Word

Printable

Details

Type: Bug
Resolution: Fixed
Priority: Low
Fix Version/s: 8.12.0, 8.5.8, 7.13.17, 8.13.0
Affects Version/s: 7.13.9, 8.8.0, 8.8.1
Component/s: System Administration - General Configuration
Labels:

Fixed in Long Term Support Release/s:

Download 7.13, 8.5
Introduced in Version:
7.13
Symptom Severity:
Severity 3 - Minor
Bug Fix Policy:
View Atlassian Server bug fix policy

Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate project keys via an Information Disclosure vulnerability in the /browse.PROJECTKEY endpoint.

Affected versions:

version < 7.13.17
7.14.0 ≤ version < 8.5.8
8.6.0 ≤ version < 8.12.0

Fixed versions:

7.13.17
8.5.8
8.12.0
8.13.0

Attachments

Issue Links

mentioned in: Page Loading...; Page Loading...; Page Loading...

Activity

People

Assignee:: Unassigned

Reporter:: Security Metrics Bot

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Dates

Due:: 30/Nov/2020

Created:: 31/Aug/2020 9:25 PM

Updated:: 17/Nov/2022 6:50 PM

Resolved:: 01/Sep/2020 4:29 AM