CVE-2019-20410
First published: Mon Jun 29 2020(Updated: )
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view sensitive information via an Information Disclosure vulnerability in the comment restriction feature. The affected versions are before version 7.6.17, from version 7.7.0 before 7.13.9, and from version 8.0.0 before 8.4.2.
Credit: security@atlassian.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Atlassian JIRA | <7.6.17 | |
| Atlassian Jira Data Center | >=7.7.0<7.13.9 | |
| Atlassian Jira Data Center | >=8.0.0<8.4.2 | |
| Atlassian Jira Server | >=7.7.0<7.13.9 | |
| Atlassian Jira Server | >=8.0.0<8.4.2 | |
| Atlassian Jira Software Data Center | <7.6.17 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-20410?
CVE-2019-20410 is an Information Disclosure vulnerability in Atlassian Jira Server and Data Center.
How can remote attackers exploit CVE-2019-20410?
Remote attackers can exploit CVE-2019-20410 to view sensitive information through the comment restriction feature.
Which versions of Atlassian Jira Server and Data Center are affected by CVE-2019-20410?
Affected versions of Atlassian Jira Server and Data Center are before version 7.6.17, from version 7.7.0 before 7.13.9, and from version 8.0.0 before 8.4.2.
What is the severity of CVE-2019-20410?
CVE-2019-20410 has a severity rating of Medium.
How can I fix CVE-2019-20410?
To fix CVE-2019-20410, you should upgrade your Atlassian Jira Server or Data Center to version 7.6.17, 7.13.9, or 8.4.2.
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/tags
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/atlassian
- canonical/atlassian jira
- canonical/atlassian jira data center
- version/atlassian jira data center/7.7.0
- version/atlassian jira data center/8.0.0
- canonical/atlassian jira server
- version/atlassian jira server/7.7.0
- version/atlassian jira server/8.0.0
- canonical/atlassian jira software data center