CVE-2019-15013

First published: Wed Dec 18 2019(Updated: )

The WorkflowResource class removeStatus method in Jira before version 7.13.12, from version 8.0.0 before version 8.4.3, and from version 8.5.0 before version 8.5.2 allows authenticated remote attackers who do not have project administration access to remove a configured issue status from a project via a missing authorisation check.

Credit: security@atlassian.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/type
• collector/mitre-cve
• source/MITRE
• agent/weakness
• agent/severity
• agent/last-modified-date
• agent/references
• agent/author
• agent/description
• agent/softwarecombine
• agent/tags
• agent/first-publish-date
• agent/event
• vendor/atlassian
• canonical/atlassian jira
• canonical/atlassian jira server
• version/atlassian jira server/8.0.0
• version/atlassian jira server/8.5.0