First published: Mon Jul 03 2006(Updated: )
secure/ConfigureReleaseNote.jspa in Atlassian JIRA 3.6.2-#156 allows remote attackers to obtain sensitive information via unspecified manipulations of the projectId parameter, which displays the installation path and other system information in an error message.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Atlassian JIRA | =3.6.2_156 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-3339 is classified as a medium-severity vulnerability due to information disclosure risks.
To fix CVE-2006-3339, upgrade to a later version of Atlassian JIRA that addresses this vulnerability.
CVE-2006-3339 specifically affects Atlassian JIRA version 3.6.2-#156.
CVE-2006-3339 is an information disclosure vulnerability allowing remote attackers to access sensitive system information.
CVE-2006-3339 can expose sensitive information such as the installation path and other system data through error messages.