CVE-2019-15011: Medium severity Atlassian Application Links vulnerability
The ListEntityLinksServlet resource in Application Links before version 5.0.12, from version 5.1.0 before version 5.2.11, from version 5.3.0 before version 5.3.7, from version 5.4.0 before 5.4.13, and from version 6.0.0 before 6.0.5 disclosed application link information to non-admin users via a missing permissions check.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-15011?
CVE-2019-15011 is a vulnerability in Atlassian Application Links that allows non-admin users to access application link information.
How does CVE-2019-15011 impact Atlassian Application Links?
CVE-2019-15011 exposes application link information to non-admin users.
What is the severity of CVE-2019-15011?
CVE-2019-15011 has a severity score of 4.3, which is considered medium.
Which versions of Atlassian Application Links are affected by CVE-2019-15011?
Atlassian Application Links versions 5.0.12 and earlier, versions 5.1.0 to 5.2.11, versions 5.3.0 to 5.3.7, versions 5.4.0 to 5.4.13, and versions 6.0.0 to 6.0.5 are affected by CVE-2019-15011.
How can I fix CVE-2019-15011 in Atlassian Application Links?
To fix CVE-2019-15011, update Atlassian Application Links to version 5.0.12 or later, 5.2.11 or later, 5.3.7 or later, 5.4.13 or later, or 6.0.5 or later.