CVE-2019-3401: Medium severity atlassian jira vulnerability
Published May 22, 2019
·Updated
The ManageFilters.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check.
Affected Software
2 affected components
Atlassian Jira<7.13.3
Atlassian Jira Server>=8.0.0<8.1.1
Event History
May 22, 2019
CVE Published
via MITRE·05:27 PM
Data Sourced
via MITRE·05:27 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-3401?
CVE-2019-3401 has been rated as a medium severity vulnerability due to its potential for information disclosure.
2
How do I fix CVE-2019-3401?
To mitigate CVE-2019-3401, upgrade Jira to version 7.13.3 or version 8.1.1 and above.
3
What impact does CVE-2019-3401 have on user security?
CVE-2019-3401 allows remote attackers to enumerate usernames, which can lead to targeted attacks against those users.
4
Is my version of Jira affected by CVE-2019-3401?
If you are using Jira versions prior to 7.13.3 or between 8.0.0 and 8.1.1, your installation is vulnerable to CVE-2019-3401.
5
What is the nature of the vulnerability in CVE-2019-3401?
CVE-2019-3401 is an authorization issue that enables attackers to access unauthorized user information.