CVE-2019-20407: Medium severity Atlassian Jira Data Center vulnerability
The ConfigureBambooRelease resource in Jira Software and Jira Software Data Center before version 8.6.1 allows authenticated remote attackers to view release version information in projects that they do not have access to through an missing authorisation check.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-20407?
CVE-2019-20407 is classified as a high-severity vulnerability due to its potential impact on sensitive project release information.
How do I fix CVE-2019-20407?
To fix CVE-2019-20407, upgrade Jira Software or Jira Software Data Center to version 8.6.1 or later.
What systems are affected by CVE-2019-20407?
CVE-2019-20407 affects Atlassian Jira Software and Jira Software Data Center versions prior to 8.6.1.
What type of attacks can CVE-2019-20407 facilitate?
CVE-2019-20407 can facilitate authenticated remote attacks, allowing unauthorized users to view restricted release version information.
Is the impact of CVE-2019-20407 limited to data access?
Yes, the impact of CVE-2019-20407 is limited to unauthorized access to release version information in projects without proper authorization.