← CVE Intelligence

CVE-2019-15011

Atlassian / Application Links PUBLISHED

Description (CNA)

The ListEntityLinksServlet resource in Application Links before version 5.0.12, from version 5.1.0 before version 5.2.11, from version 5.3.0 before version 5.3.7, from version 5.4.0 before 5.4.13, and from version 6.0.0 before 6.0.5 disclosed application link information to non-admin users via a missing permissions check.

Affected (CNA)

Vendor / productVersions
Atlassian / Application Linksaffected unspecified before 5.0.12; affected 5.1.0 before unspecified; affected unspecified before 5.2.11; affected 5.3.0 before unspecified; affected unspecified before 5.3.7; affected 5.4.0 before unspecified; affected unspecified before 5.4.13; affected 6.0.0 before unspecified; affected unspecified before 6.0.5

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.