VULNERABILITY INTELLIGENCE

CVE-2019-8443

CVSS score8.1 HIGH

EPSS probability2.62%

CISA KEVNot currently listed

Published2019-05-22

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The ViewUpgrades resource in Jira before version 7.13.4, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers who have obtained access to administrator's session to access the ViewUpgrades administrative resource without needing to re-authenticate to pass "WebSudo" through an improper access control vulnerability.

Weakness classification

CWE-287: Improper Authentication

Primary references

security@atlassian.com — Broken Link
security@atlassian.com — Issue Tracking, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Broken Link
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Vendor Advisory