Atlassian Jira Incorrect Default Permissions Vulnerability - CVE-2019-20106 - Vulnerability Database

Atlassian Jira Incorrect Default Permissions Vulnerability - CVE-2019-20106

Medium

Reference: CVE-2019-20106

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-20106

Title: Atlassian Jira Incorrect Default Permissions Vulnerability

Overview:

Comment properties in Atlassian Jira Server and Data Center before version 7.13.12 from 8.0.0 before version 8.5.4 and 8.6.0 before version 8.6.1 allows remote attackers to make comments on a ticket to which they do not have commenting permissions via a broken access control bug.