Unscored CVE-2019-20405 EUVD-2019-10954GHSA-fqgg-47vq-qpg3

The JMX monitoring flag in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to turn the JMX monitoring fl…

Published Feb 6, 2020 · Updated Sep 16, 2024 · Assigned by atlassian

Vendor: Atlassian Product: Jira Server Category: Web / CMS

Description

The JMX monitoring flag in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to turn the JMX monitoring flag off or on via a Cross-site request forgery (CSRF) vulnerability.

Affected products

Vendor	Product	Affected	Fixed
Atlassian	Jira Server	unspecified – < 8.6.0	8.6.0

References

https://jira.atlassian.com/browse/JRASERVER-70570