Uploaded image for project: 'Jira Service Management Data Center'
  1. Jira Service Management Data Center
  2. JSDSERVER-15309

Information Disclosure in Jira Service Management Data Center and Server

XMLWordPrintable

    • Icon: Public Security Vulnerability Public Security Vulnerability
    • Resolution: Fixed
    • Icon: High High
    • 5.16.0, 5.4.21, 5.12.8
    • 5.4.0, (32)
      5.4.1, 5.4.2, 5.4.3, 5.4.4, 5.4.5, 5.4.6, 5.4.7, 5.4.8, 5.4.9, 5.4.10, 5.12.0, 5.4.11, 5.4.12, 5.12.1, 5.4.13, 5.4.14, 5.4.15, 5.12.2, 5.4.16, 5.12.3, 5.4.17, 5.12.4, 5.15.0, 5.4.18, 5.12.6, 5.4.19, 5.12.5, 5.15.1, 5.4.20, 5.12.7, 5.15.2, 5.15.3
    • None
    • None
    • 7.4
    • High
    • CVE-2024-21685
    • Atlassian (Internal)
    • CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
    • Information Disclosure
    • Jira Service Management Data Center, Jira Service Management Server

      This Information Disclosure vulnerability, with a CVSS Score of 7.4, allows an unauthenticated attacker to view sensitive information via an Information Disclosure vulnerability which has high impact to confidentiality, no impact to integrity, no impact to availability, and requires user interaction.

      Atlassian recommends that Jira Service Management Data Center and Server customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions:

       

      Data Center

      Affected versions Fixed versions
      5.15.0 to 5.15.3 5.16.0 
      5.14.0 to 5.14.2 5.16.0
      5.13.0 to 5.13.2 5.16.0
      from 5.12.0 LTS to 5.12.7 LTS 5.16.0 or 5.12.8 LTS recommended
      from 5.11.0 to 5.11.3 5.16.0 or 5.12.8 LTS recommended
      from 5.10.0 to 5.10.2 5.16.0 or 5.12.8 LTS recommended
      from 5.9.0 to 5.9.2 5.16.0 or 5.12.8 LTS recommended
      from 5.8.0 to 5.8.2 5.16.0 or 5.12.8 LTS recommended
      from 5.7.0 to 5.7.2 5.16.0 or 5.12.8 LTS recommended
      from 5.6.0 to 5.6.2 5.16.0 or 5.12.8 LTS recommended
      from 5.5.0 to 5.5.1 5.16.0 or 5.12.8 LTS recommended
      from 5.4.0 LTS to 5.4.20 LTS 5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS
      from 5.3.0 to 5.3.1 5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS
      from 5.2.0 to 5.2.1 5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS
      from 5.1.0 to 5.1.1 5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS
      5.0 5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS
      from 4.22 to 4.22.6 5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS
      Any earlier versions 5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS

       

      Server

      Affected versions Fixed versions
      from 5.12.0 LTS to 5.12.7 LTS 5.12.8 LTS recommended
      from 5.11.0 to 5.11.3 5.12.8 LTS recommended
      from 5.10.0 to 5.10.2 5.12.8 LTS recommended
      from 5.9.0 to 5.9.2 5.12.8 LTS recommended
      from 5.8.0 to 5.8.2 5.12.8 LTS recommended
      from 5.7.0 to 5.7.2 5.12.8 LTS recommended
      from 5.6.0 to 5.6.2 5.12.8 LTS recommended
      from 5.5.0 to 5.5.1 5.12.8 LTS recommended
      from 5.4.0 LTS to 5.4.20 LTS 5.12.8 LTS recommended or 5.4.21 LTS
      from 5.3.0 to 5.3.1 5.12.8 LTS recommended or 5.4.21 LTS
      from 5.2.0 to 5.2.1 5.12.8 LTS recommended or 5.4.21 LTS
      from 5.1.0 to 5.1.1 5.12.8 LTS recommended or 5.4.21 LTS
      5.0 5.12.8 LTS recommended or 5.4.21 LTS
      from 4.22 to 4.22.6 5.12.8 LTS recommended or 5.4.21 LTS
      Any earlier versions 5.12.8 LTS recommended or 5.4.21 LTS

       

      See the release notes (http://www.atlassian.com/software/jira/service-management/download-archives). You can download the latest version of Jira Software Data Center and Server from the download center (http://www.atlassian.com/software/jira/service-management/download-archives)

      This vulnerability was found internally.

          Form Name

            [JSDSERVER-15309] Information Disclosure in Jira Service Management Data Center and Server

            There are no comments yet on this issue.

              Unassigned Unassigned
              5de531f82e45 Lee Berg
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: