CVE-2019-3401: Medium severity Atlassian Jira vulnerability
The ManageFilters.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Jirato a version that resolves this vulnerability.Fixed in 7.13.3 - Upgrade
Upgrade
Jirato a version that resolves this vulnerability.Fixed in 8.1.1
Event History
Frequently Asked Questions
What is the severity of CVE-2019-3401?
CVE-2019-3401 has been rated as a medium severity vulnerability due to its potential for information disclosure.
How do I fix CVE-2019-3401?
To mitigate CVE-2019-3401, upgrade Jira to version 7.13.3 or version 8.1.1 and above.
What impact does CVE-2019-3401 have on user security?
CVE-2019-3401 allows remote attackers to enumerate usernames, which can lead to targeted attacks against those users.
Is my version of Jira affected by CVE-2019-3401?
If you are using Jira versions prior to 7.13.3 or between 8.0.0 and 8.1.1, your installation is vulnerable to CVE-2019-3401.
What is the nature of the vulnerability in CVE-2019-3401?
CVE-2019-3401 is an authorization issue that enables attackers to access unauthorized user information.