QwikSec

Security Database

CVE

CWE

Training

CVE-2019-14997

Published: Sep 11, 2019

Modified: Sep 16, 2024

PUBLISHED

Description

The AccessLogFilter class in Jira before version 8.4.0 allows remote anonymous attackers to learn details about other users, including their username, via an information expose through caching vulnerability when Jira is configured with a reverse Proxy and or a load balancer with caching or a CDN.

Vendor	Product	Versions
Atlassian	Jira	affected `unspecified - < 8.4.0`

Weaknesses (CWE)

References

https://jira.atlassian.com/browse/JRASERVER-69794

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.