CVE-2019-20405 - The JMX monitoring flag in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to turn the JMX monitoring flag off or on via a Cross-site request forgery (CSRF) vulnerability

Back Back to CVE browser

MEDIUM

The JMX monitoring flag in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to turn the JMX monitoring flag off or on via a Cross-site request forgery (CSRF) vulnerability

Published Feb 6, 2020

4.3

MEDIUM

CVSS 3.1

EPSS 0.55%

Description

The JMX monitoring flag in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to turn the JMX monitoring flag off or on via a Cross-site request forgery (CSRF) vulnerability.

Affected products

Vendor Atlassian Product Jira Server Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <8.6.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Atlassian

Jira Server

n/a

Version	Status	Constraints
unspecified	affected	<8.6.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-10954
Advisory
https://jira.atlassian.com/browse/JRASERVER-70570
x_refsource_MISCIssue TrackingVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-10954		Advisory
https://jira.atlassian.com/browse/JRASERVER-70570		x_refsource_MISCIssue TrackingVendor Advisory