CVE-2019-5095

2019-10-3119:51:08

talos

www.cve.org

AI Score

4.4

Confidence

High

EPSS

0.001

Percentile

24.8%

JSON

An issue summary information disclosure vulnerability exists in Atlassian Jira Tempo plugin, version 4.10.0. Authenticated users can obtain the summary for issues they do not have permission to view via the Tempo plugin.

CNA Affected

[
  {
    "product": "Atlassian",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Atlassian Jira 7.6.4 Atlassian Jira Tempo Core system plugin 4.10.0"
      }
    ]
  }
]

References

talosintelligence.com/vulnerability_reports/TALOS-2019-0838