Описание
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to continue to view cached content even after losing permissions, via a Broken Access Control vulnerability in the allowlist feature. The affected versions are before version 8.13.9, and from version 8.14.0 before 8.18.0.
Ссылки
- Issue TrackingVendor Advisory
- Issue TrackingVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 8.13.9 (исключая)Версия до 8.13.9 (исключая)Версия от 8.14.0 (включая) до 8.18.0 (исключая)Версия от 8.14.0 (включая) до 8.18.0 (исключая)
Одно из
cpe:2.3:a:atlassian:data_center:*:*:*:*:*:*:*:*
cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*
cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*
cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*
EPSS
Процентиль: 67%
0.00558
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-613
CWE-613
Связанные уязвимости
CVSS3: 7.5
github
около 3 лет назад
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to continue to view cached content even after losing permissions, via a Broken Access Control vulnerability in the allowlist feature. The affected versions are before version 8.13.9, and from version 8.14.0 before 8.18.0.
EPSS
Процентиль: 67%
0.00558
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-613
CWE-613