NetSight
high7.8

CVE-2019-20419

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to execute arbitrary code via a DLL hijacking vulnerability in Tomcat.

Impact

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to execute arbitrary code via a DLL hijacking vulnerability in Tomcat. The affected versions are before version 8.5.5, and from version 8.6.0 before 8.7.2.

Affected products

VendorProductAffected versions
AtlassianJira Data Center
before 8.5.5
from 8.6.0 before 8.7.2
AtlassianJira Server
before 8.5.5
from 8.6.0 before 8.7.2

Weakness classification

References