Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers without the "Browse Users" permission to view groups via an Information Disclosure vulnerability in the browsegroups.action endpoint. The affected versions are before version 4.22.2.
References
| Link | Resource |
|---|---|
| https://jira.atlassian.com/browse/JSDSERVER-11900 | Issue Tracking Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
08 Aug 2023, 14:22
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo |
09 Aug 2022, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-863 | |
| First Time |
Atlassian jira Service Management
Atlassian |
|
| References | (MISC) https://jira.atlassian.com/browse/JSDSERVER-11900 - Issue Tracking, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
| CPE | cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:server:*:*:* cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:data_center:*:*:* |
03 Aug 2022, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-08-03 03:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-36800
Mitre link : CVE-2022-36800
CVE.ORG link : CVE-2022-36800
JSON object : View
Products Affected
atlassian
- jira_service_management
CWE