CVE-2019-20106

CVE-2019-20106: vulnerability in Atlassian Jira Server and Data Center

Published · Updated

Follow this CVE+ Monitor Jira Server and Data Center

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.1%
Comment properties in Atlassian Jira Server and Data Center before version 7.13.12, from 8.0.0 before version 8.5.4, and 8.6.0 before version 8.6.1 allows remote attackers to make comments on a ticket to which they do not have commenting permissions via a broken access control bug.
Affected products
Atlassian · Jira Server and Data Center
Related CVEs — Atlassian Jira Server and Data Center

In the same product, most dangerous first.

CVE-2019-11581CRITICALCVE-2019-11581EPSS 84.6%KEVCVE-2020-14167—CVE-2020-14167EPSS 2.1%CVE-2020-14168—CVE-2020-14168EPSS 1.7%CVE-2020-4029—CVE-2020-4029EPSS 1.6%CVE-2019-20105—CVE-2019-20105EPSS 1.5%CVE-2020-4022—CVE-2020-4022EPSS 1.1%