Riskcovery

CVE-2019-15005

State
Published
Severity
Not scored
Published
Nov 8, 2019
Updated
Sep 16, 2024
Reserved
Aug 13, 2019

Read the record on cve.org

Description

The Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an unprivileged user to initiate periodic log scans and send the results to a user-specified email address due to a missing authorization check. The email message may contain configuration information about the application that the plugin is installed into. A vulnerable version of the plugin is included with Bitbucket Server / Data Center before 6.6.0, Confluence Server / Data Center before 7.0.1, Jira Server / Data Center before 8.3.2, Crowd / Crowd Data Center before 3.6.0, Fisheye before 4.7.2, Crucible before 4.7.2, and Bamboo before 6.10.2.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Bitbucket ServerAtlassian
  • before 6.6.0Affected
Jira ServerAtlassian
  • before 8.3.2Affected
Confluence ServerAtlassian
  • before 7.0.1Affected
CrowdAtlassian
  • before 3.6.0Affected
FisheyeAtlassian
  • before 4.7.2Affected
CrucibleAtlassian
  • before 4.7.2Affected
BambooAtlassian
  • before 6.10.2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.