CVE-2019-20417 in JIRA Server

الملخص

بحسب MITRE

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate internal services via an Information Disclosure vulnerability. The vulnerability is only exploitable if WebSudo is disabled in Jira. The affected versions are before version 8.4.2.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• حجز: 23/01/2020
• الاعتدال: تمت الموافقة
• إدخال: VDB-157514
• CPE: جاهز
• CWE: CWE-200 (مؤكد)
• CVSS: 7.5 (NVD)
• EPSS: 0.00000
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Hostingprovider, Finance, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-20417
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-20417
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-20417/