6.5
CVE-2019-20410
- EPSS 0.53%
- Veröffentlicht 29.06.2020 06:15:10
- Zuletzt bearbeitet 21.11.2024 04:38:24
- Quelle security@atlassian.com
- CVE-Watchlists
- Unerledigt
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view sensitive information via an Information Disclosure vulnerability in the comment restriction feature. The affected versions are before version 7.6.17, from version 7.7.0 before 7.13.9, and from version 8.0.0 before 8.4.2.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Atlassian ≫ Jira Data Center Version >= 7.7.0 < 7.13.9
Atlassian ≫ Jira Data Center Version >= 8.0.0 < 8.4.2
Atlassian ≫ Jira Server Version >= 7.7.0 < 7.13.9
Atlassian ≫ Jira Server Version >= 8.0.0 < 8.4.2
Atlassian ≫ Jira Software Data Center Version < 7.6.17
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.53% | 0.664 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:P/I:N/A:N
|