CVE-2019-8446
MEDIUM EXPLOITED NUCLEIAtlassian Jira Server < 8.3.2 - Incorrect Authorization
Title source: ruleDescription
The /rest/issueNav/1/issueTable resource in Jira before version 8.3.2 allows remote attackers to enumerate usernames via an incorrect authorisation check.
Nuclei Templates (1)
Jira Improper Authorization
MEDIUMby dhiyaneshDk
Shodan:
http.component:"Atlassian Jira" || http.component:"atlassian jira"
Scores
CVSS v3
5.3
EPSS
0.7287
EPSS Percentile
98.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Details
VulnCheck KEV
2024-01-22
CWE
CWE-863
Status
published
Products (1)
atlassian/jira_server
7.6 - 8.3.2
Published
Aug 23, 2019
Tracked Since
Feb 18, 2026