medium5.3
CVE-2019-3401
The ManageFilters.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to enumerate usernames via an…
Impact
The ManageFilters.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Jira | before 7.13.3 |
| Atlassian | Jira Server | from 8.0.0 before 8.1.1 |