CVE-2019-5095

An issue summary information disclosure vulnerability exists in Atlassian Jira Tempo plugin, version 4.10.0. Authenticated users can obtain the summary for issues they do not have permission to view via the Tempo plugin.

CVSS v3.1

4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CVSS v2.0

4.0 MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N

EPSS

1.12% chance of exploitation in the next 30 days, 64th percentile

Published

2019-10-31

Updated

2024-08-04

Proof-of-concept exploits (1)

• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0838

References

• CVE Record
• NVD entry

Related

• CVE-2019-5094
• CVE-2019-5096
• CVE-2019-5089
• CVE-2019-5097
• CVE-2019-5088
• CVE-2019-5098