CVE-2019-15002 — Atlassian / Jira Server

CVE-2019-15002

Atlassian / Jira Server PUBLISHED

Description (CNA)

An exploitable CSRF vulnerability exists in Atlassian Jira, from versions 7.6.4 to 8.1.0. The login form doesn’t require a CSRF token. As a result, an attacker can log a user into the system under an unexpected account.

Affected (CNA)

Vendor / product	Versions
Atlassian / Jira Server	unaffected unspecified before 7.6.4; affected unspecified before 8.1.0
Atlassian / Jira Data Center	unaffected unspecified before 7.6.4; affected unspecified before 8.1.0

CWE

No CWE identifiers supplied.

References

https://jira.atlassian.com/browse/JRASERVER-67979

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.