CVE-2019-20417 in JIRA Server

Sumário

de MITRE

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate internal services via an Information Disclosure vulnerability. The vulnerability is only exploitable if WebSudo is disabled in Jira. The affected versions are before version 8.4.2.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservar: 23/01/2020
• Moderação: aceite
• Entrada: VDB-157514
• CPE: pronto
• CWE: CWE-200 (confirmado)
• CVSS: 7.5 (NVD)
• EPSS: 0.00000
• KEV: não
• Atividades: muito baixo
• Sector: Insurance, Chemical, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-20417
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-20417
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-20417/