CVE-2019-20410

MEDIUM

Atlassian Jira < 7.6.17, 7.7.0-7.13.9, 8.0.0-8.4.2 - Information Disclosure in Comment Restriction Feature

Title source: llm
STIX 2.1

Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view sensitive information via an Information Disclosure vulnerability in the comment restriction feature. The affected versions are before version 7.6.17, from version 7.7.0 before 7.13.9, and from version 8.0.0 before 8.4.2.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_misc
https://jira.atlassian.com/browse/JRASERVER-70884

Scores

CVSS v3 6.5
EPSS 0.0033
EPSS Percentile 56.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

Status published
Products (4)
atlassian/jira < 7.6.17
atlassian/jira_data_center 7.7.0 - 7.13.9
atlassian/jira_server 7.7.0 - 7.13.9
atlassian/jira_software_data_center < 7.6.17
Published Jun 29, 2020
Tracked Since Feb 18, 2026