CVE-2019-8445: Medium severity atlassian server vulnerability
Published Aug 23, 2019
·Updated
Several worklog rest resources in Jira before version 7.13.7, and from version 8.0.0 before version 8.3.2 allow remote attackers to view worklog time information via a missing permissions check.
Affected Software
2 affected components
Atlassian Jira Server>=7.13.0<7.13.7
Atlassian Jira Server>=8.0.0<8.3.2
Event History
Aug 23, 2019
CVE Published
via MITRE·01:49 PM
Data Sourced
via MITRE·01:49 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-8445?
CVE-2019-8445 is classified as a high severity vulnerability due to its potential for remote exploitation.
2
How do I fix CVE-2019-8445?
To fix CVE-2019-8445, upgrade to Jira version 7.13.7 or version 8.3.2 or later.
3
What does CVE-2019-8445 affect?
CVE-2019-8445 affects Atlassian Jira Server versions prior to 7.13.7 and versions from 8.0.0 to 8.3.2.
4
What type of attack does CVE-2019-8445 allow?
CVE-2019-8445 allows attackers to view worklog time information by bypassing permissions checks.
5
Is CVE-2019-8445 due to a configuration issue?
No, CVE-2019-8445 is due to a missing permissions check in the Jira application code.