medium4.9
CVE-2019-20402
Support zip files in Atlassian Jira Server and Data Center before version 8.6.0 could be downloaded by a System Administrator user without requiring the user t…
Impact
Support zip files in Atlassian Jira Server and Data Center before version 8.6.0 could be downloaded by a System Administrator user without requiring the user to re-enter their password via an improper authorization vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Jira | before 8.6.0 |
| Atlassian | Jira Software Data Center | before 8.6.0 |