CVE-2019-8446

CVE-2019-8446

Vendor Atlassian
Product Jira
Weakness CWE-863 · Incorrect authorization
Published August 23, 2019
Last update September 17, 2024

CVSS base score

What the vulnerability does

01Description

The /rest/issueNav/1/issueTable resource in Jira before version 8.3.2 allows remote attackers to enumerate usernames via an incorrect authorisation check.

Key dates

02Disclosure timeline

August 23, 2019 CVE published
September 17, 2024 Record updated