VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Feb 6, 2020· Updated Jun 17, 2026

CVE-2019-20106

CVE-2019-20106

Description

Comment properties in Atlassian Jira Server and Data Center before version 7.13.12, from 8.0.0 before version 8.5.4, and 8.6.0 before version 8.6.1 allows remote attackers to make comments on a ticket to which they do not have commenting permissions via a broken access control bug.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Atlassian/Jira2 versions
    cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*range: <7.13.12
    • (no CPE)range: <7.13.12, 8.0.0 <= version < 8.5.4, 8.6.0 <= version < 8.6.1
  • Atlassian/Jira Data Center2 versions
    cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*range: >=8.0.0,<8.5.4
    • cpe:2.3:a:atlassian:jira_data_center:8.6.0:*:*:*:*:*:*:*
  • Atlassian/Jira Server3 versions
    cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*range: >=8.0.0,<8.5.4
    • cpe:2.3:a:atlassian:jira_server:8.6.0:*:*:*:*:*:*:*
    • (no CPE)range: <7.13.12
  • Atlassian/Jira Software Data Center
    cpe:2.3:a:atlassian:jira_software_data_center:*:*:*:*:*:*:*:*
    Range: <7.13.12
  • Atlassian/Jira Core Data Centerllm-fuzzy
    Range: 8.0.0 <= version < 8.5.4, 8.6.0 <= version < 8.6.1
  • Atlassian/Crowd Data Center and Servercpe-rescue
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.