← CVE Intelligence

CVE-2019-3403

Atlassian / Jira PUBLISHED

Description (CNA)

The /rest/api/2/user/picker rest resource in Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check.

Affected (CNA)

Vendor / productVersions
Atlassian / Jiraaffected unspecified before 7.13.3; affected 8.0.0 before unspecified; affected unspecified before 8.0.4; affected 8.1.0 before unspecified; affected unspecified before 8.1.1

CWE

CWE-863

References

ADP enrichment

CVE

No English description supplied.