VULNERABILITY INTELLIGENCE

CVE-2019-20404

CVSS score4.3 MEDIUM
EPSS probability1.30%
CISA KEVNot currently listed
Published2020-02-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

The API in Atlassian Jira Server and Data Center before version 8.6.0 allows authenticated remote attackers to determine project titles they do not have access to via an improper authorization vulnerability.

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references