CVE-2019-3401

The ManageFilters.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check.

CVSS v3.1

5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

12.72% chance of exploitation in the next 30 days, 96th percentile

Nuclei

medium · CWE-863

Published

2019-05-22

Updated

2024-09-17

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-3401.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2019-3398
• CVE-2019-3402
• CVE-2019-3396
• CVE-2019-3403
• CVE-2019-3394
• CVE-2019-3465