CVE-2022-36800 — Atlassian / Jira Service Management Server

Description (CNA)

Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers without the "Browse Users" permission to view groups via an Information Disclosure vulnerability in the browsegroups.action endpoint. The affected versions are before version 4.22.2.

Affected (CNA)

Vendor / product	Versions
Atlassian / Jira Service Management Server	affected unspecified before 4.22.2
Atlassian / Jira Service Management Data Center	affected unspecified before 4.22.2

CWE

No CWE identifiers supplied.

References

https://jira.atlassian.com/browse/JSDSERVER-11900

ADP enrichment

CVE

No English description supplied.

https://jira.atlassian.com/browse/JSDSERVER-11900

CISA-ADP

No English description supplied.

No references supplied.