CVE-2019-20407

4.3 mediumEPSS 1.2%

Medium (4.3) in atlassian. EPSS 1.2% chance of exploitation in the next 30 days.

The ConfigureBambooRelease resource in Jira Software and Jira Software Data Center before version 8.6.1 allows authenticated remote attackers to view release version information in projects that they do not have access to through an missing authorisation check.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2020-03-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

atlassian:jira_data_center
atlassian:jira_server

References

https://jira.atlassian.com/browse/JRASERVER-70599
https://jira.atlassian.com/browse/JRASERVER-70599

Check your stack JSON