CVE-2006-3339: Medium severity Atlassian Jira vulnerability

Published Jul 3, 2006

Updated

secure/ConfigureReleaseNote.jspa in Atlassian JIRA 3.6.2-#156 allows remote attackers to obtain sensitive information via unspecified manipulations of the projectId parameter, which displays the installation path and other system information in an error message.

Affected Software

1 affected component

Atlassian Jira=3.6.2_156

Event History

Jul 3, 2006

CVE Published

06:05 PM

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2006-3339?

CVE-2006-3339 is classified as a medium-severity vulnerability due to information disclosure risks.

How do I fix CVE-2006-3339?

To fix CVE-2006-3339, upgrade to a later version of Atlassian JIRA that addresses this vulnerability.

What does CVE-2006-3339 affect?

CVE-2006-3339 specifically affects Atlassian JIRA version 3.6.2-#156.

What type of vulnerability is CVE-2006-3339?

CVE-2006-3339 is an information disclosure vulnerability allowing remote attackers to access sensitive system information.

What kind of information can be exposed by CVE-2006-3339?

CVE-2006-3339 can expose sensitive information such as the installation path and other system data through error messages.