7.5
CVE-2019-20898
- EPSS 1.3%
- Veröffentlicht 13.07.2020 01:15:13
- Zuletzt bearbeitet 21.11.2024 04:39:38
- Quelle security@atlassian.com
- CVE-Watchlists
- Unerledigt
LoginAffected versions of Atlassian Jira Server and Data Center allow remote attackers to access sensitive information without being authenticated in the Global permissions screen. The affected versions are before version 8.8.0.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Atlassian ≫ Jira Software Data Center Version < 8.8.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.3% | 0.668 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
https://jira.atlassian.com/browse/JRASERVER-70942