vulnerability
Atlassian JIRA: Incorrect Default Permissions (CVE-2019-20106)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:L/Au:S/C:N/I:P/A:N) | Feb 6, 2020 | Feb 11, 2020 | Aug 11, 2025 |
Severity
4
CVSS
(AV:N/AC:L/Au:S/C:N/I:P/A:N)
Published
Feb 6, 2020
Added
Feb 11, 2020
Modified
Aug 11, 2025
Description
Comment properties in Atlassian Jira Server and Data Center before version 7.13.12, from 8.0.0 before version 8.5.4, and 8.6.0 before version 8.6.1 allows remote attackers to make comments on a ticket to which they do not have commenting permissions via a broken access control bug.
Solutions
atlassian-jira-upgrade-7_13_12atlassian-jira-upgrade-8_5_4atlassian-jira-upgrade-8_6_1
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.