CVE-2019-3401

CVE-2019-3401

Vendor Atlassian

Product Jira

Weakness CWE-863 · Incorrect authorization

Published May 22, 2019

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The ManageFilters.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check.

Key dates

02Disclosure timeline

May 22, 2019 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-3401 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/863.html

Related vulnerabilities

Identifiers

CVE CVE-2019-3401

CWE CWE-863

Affected versions

Vendor Atlassian

Product Jira

Affected ≥ unspecified and < 7.13.3

Vendor Atlassian

Product Jira

Affected ≥ 8.0.0 and < unspecified

Vendor Atlassian

Product Jira

Affected ≥ unspecified and < 8.1.1

01Description

02Disclosure timeline

03References

04Related CVE