CVE-2019-20898

HIGH 7.5CVE-2019-20898 · Published 13/07/2020 · updated 17/06/2026

In short

CVE-2019-20898 is a HIGH (CVSS 7.5) vulnerability affecting jira (atlassian), jira software data center (atlassian).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.5% of all vulnerabilities.
Fix: update to 8.8.0 or later.

Package	Affected versions	Patched versions
jira atlassian	`< 8.8.0`	`8.8.0`
jira software data center atlassian	`< 8.8.0`	`8.8.0`

Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to access sensitive information without being authenticated in the Global permissions screen. The affected versions are before version 8.8.0.

References

jira.atlassian.com/browse/JRASERVER-70942 · Vendor Advisory

More vulnerabilities in jira

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

jira

atlassian

< 8.8.0

8.8.0

jira software data center

atlassian

< 8.8.0

8.8.0

More vulnerabilities in jira

See all →