Vulnerability CVE-2019-11583
Published: 2019-06-26

Description:
The issue searching component in Jira before version 8.1.0 allows remote attackers to deny access to Jira service via denial of service vulnerability in issue search when ordering by "Epic Name".

Type:

CWE-284

 (Improper Access Control)

CVSS2 => (AV:N/AC:L/Au:S/C:N/I:N/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4/10
2.9/10
8/10
Exploit range
Attack complexity
Authentication
Remote
Low
Single time
Confidentiality impact
Integrity impact
Availability impact
None
None
Partial
Affected software
Atlassian -> JIRA 

 References:
http://www.securityfocus.com/bid/108901
https://jira.atlassian.com/browse/JSWSERVER-20111
Copyright 2024, cxsecurity.com

 

Back to Top