Medium severity5.3NVD Advisory· Published Jun 29, 2020· Updated Jun 17, 2026
CVE-2019-20412
CVE-2019-20412
Description
The Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate the following information via an Improper Authentication vulnerability: Workflow names; Project Key, if it is part of the workflow name; Issue Keys; Issue Types; Status Types. The affected versions are before version 7.13.9, and from version 8.0.0 before 8.4.2.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*range: >=8.0.0,<8.4.2
- (no CPE)range: <7.13.9, 8.0.0-8.4.2
- (no CPE)range: unspecified
- cpe:2.3:a:atlassian:jira_software_data_center:*:*:*:*:*:*:*:*Range: <7.13.9
- Range: <7.13.9, 8.0.0-8.4.2
Patches
Vulnerability mechanics
References
1- jira.atlassian.com/browse/JRASERVER-70882nvdVendor Advisory
News mentions
0No linked articles in our index yet.