Affected versions of Atlassian Jira Server and Data Center allow a remote attacker who has had their access revoked from Jira Service Management to enable and disable Issue Collectors on Jira Service Management projects via an Improper Authentication vulnerability in the /secure/ViewCollectors endpoint. The affected versions are before version 8.19.1.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NAtlassian Data Center
APPAtlassian< 8.19.1Atlassian Jira
APPAtlassian< 8.19.1
Powiązane podatności
This issue exists to document that a security improvement in the way that Jira Server and Data Center use velo...
The way in which velocity templates were used in Atlassian Jira Server and Data Center prior to version 8.8.0 ...
The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and dese...
Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10; FishEye and Cr...
Affected versions of Atlassian Jira Server and Data Center allow remote attackers with administrator privilege...