Unrated severityNVD Advisory· Published Aug 23, 2019· Updated Sep 17, 2024

CVE-2019-8445

Description

Several worklog rest resources in Jira before version 7.13.7, and from version 8.0.0 before version 8.3.2 allow remote attackers to view worklog time information via a missing permissions check.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Atlassian/Jirallm-fuzzy2 versions
<7.13.7 or >=8.0.0 <8.3.2+ 1 more
- (no CPE)range: <7.13.7 or >=8.0.0 <8.3.2
- (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

jira.atlassian.com/browse/JRASERVER-69778mitrex_refsource_MISC
www.talosintelligence.com/vulnerability_reports/TALOS-2019-0840mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000