CVE-2019-20106
Comment properties in Atlassian Jira Server and Data Center before version 7.13.12, from 8.0.0 before version 8.5.4, and 8.6.0 before version 8.6.1 allows remote attackers to make comments on a ticket to which they do not have commenting permissions via a broken access control bug.
- Score
- CVSS 3.1 4.3 Medium
- Status
- Modified - security@atlassian.com
- Published
- 2020-02-06
- Last modified
- 2024-09-17
- Weaknesses
- CWE-276
Affected products
- Jira (Atlassian)
- Jira Data Center (Atlassian)
- Jira Server (Atlassian)
- Jira Server And Data Center (Atlassian)
- Jira Software Data Center (Atlassian)
References
- https://jira.atlassian.com/browse/JRASERVER-70543
