Description (CNA)
The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernames via an information disclosure vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Atlassian / Jira | affected unspecified before 8.4.0 |
CWE
No CWE identifiers supplied.
References
- https://jira.atlassian.com/browse/JRASERVER-69796
- http://packetstormsecurity.com/files/156172/Jira-8.3.4-Information-Disclosure.html
ADP enrichment
No English description supplied.