Skip to content
OpenAdvisories
Unscored CVE-2019-20400 EUVD-2019-10949GHSA-j87m-3c97-hhhg

The usage of Tomcat in Jira before version 8.5.2 allows local attackers with permission to write a dll file to a directory in the global pa…

Published Feb 6, 2020 · Updated Sep 16, 2024 · Assigned by atlassian

Description

The usage of Tomcat in Jira before version 8.5.2 allows local attackers with permission to write a dll file to a directory in the global path environmental variable can inject code into via a DLL hijacking vulnerability.

Affected products

VendorProductAffectedFixed
Atlassian Jira Server unspecified – < 8.5.2 8.5.2

References