CVE-2019-8445 - AskarLabs CVE Database

CVE-2019-8445

Vendor Atlassian

Product Jira

Weakness CWE-863 · Incorrect authorization

Published August 23, 2019

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Several worklog rest resources in Jira before version 7.13.7, and from version 8.0.0 before version 8.3.2 allow remote attackers to view worklog time information via a missing permissions check.

Key dates

02Disclosure timeline

August 23, 2019 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-8445 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/863.html

Related vulnerabilities

04Related CVE

CVE-2024-7604 Logsign Unified SecOps Platform Incorrect Authorization Authentication Bypass Vulnerability CVE-2025-27696 Apache Superset: Incorrect authorization leading to resource ownership takeover CVE-2024-3745 MSI Afterburner v4.6.6.16381 Beta 3 - ACL Bypass CVE-2026-48501 GitHub CLI tokens leak via `gh attestation` commands CVE-2026-28513 Pocket ID: OIDC authorization code validation uses AND instead of OR, allowing cross-client token exchange

Identifiers

CVE CVE-2019-8445

CWE CWE-863

Affected versions

Vendor Atlassian

Product Jira

Affected ≥ unspecified and < 7.13.7

Vendor Atlassian

Product Jira

Affected ≥ 8.0.0 and < unspecified

Vendor Atlassian

Product Jira

Affected ≥ unspecified and < 8.3.2