Unrated severityNVD Advisory· Published May 22, 2019· Updated Sep 17, 2024

CVE-2019-3403

Description

The /rest/api/2/user/picker rest resource in Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check.

Affected products

Atlassian/Jirav5
Range: unspecified

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

jira.atlassian.com/browse/JRASERVER-69242mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.066
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000