Atlassian Jira Permissions Privileges and Access Controls Vulnerability - CVE-2007-6619
The Setup Wizard in Atlassian JIRA Enterprise Edition before 3.12.1 does not properly restrict setup attempts after setup is complete which allows remote attackers to change the default language.