CVE-2019-20407

The ConfigureBambooRelease resource in Jira Software and Jira Software Data Center before version 8.6.1 allows authenticated remote attackers to view release…

published March 17, 2020

CVSS
—
EPSS
1%
Percentile
67.9
In the wild
Unconfirmed
What it is

The ConfigureBambooRelease resource in Jira Software and Jira Software Data Center before version 8.6.1 allows authenticated remote attackers to view release version information in projects that they do not have access to through an missing authorisation check.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01198 · 67.9th percentile
Published
2020-03-17T03:10Z
EPSS history
Timeline
  • 17 MAR 03:10Z
    The ConfigureBambooRelease resource in Jira Software and Jira Software Data Center before version 8.6.1 allows authenticated remote attackers to view release…
    cvelistv5