CVE-2019-8445CWE-863

Several worklog rest resources in Jira before version 7.13.7, and from version 8.0.0 before version 8.3.2 allow remote attackers to view worklog time…

published August 23, 2019

CVSS
—
EPSS
3%
Percentile
85.9
In the wild
Unconfirmed
What it is

Several worklog rest resources in Jira before version 7.13.7, and from version 8.0.0 before version 8.3.2 allow remote attackers to view worklog time information via a missing permissions check.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02711 · 85.9th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2019-08-23T13:49Z
EPSS history
Timeline
  • 23 AUG 13:49Z
    Several worklog rest resources in Jira before version 7.13.7, and from version 8.0.0 before version 8.3.2 allow remote attackers to view worklog time…
    cvelistv5