high7.8
CVE-2019-20400
The usage of Tomcat in Jira before version 8.5.2 allows local attackers with permission to write a dll file to a directory in the global path environmental var…
Impact
The usage of Tomcat in Jira before version 8.5.2 allows local attackers with permission to write a dll file to a directory in the global path environmental variable can inject code into via a DLL hijacking vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Jira Server | from 8.3.2 before 8.5.2 from 8.5.3 before 8.6.0 |