CVE-2019-15003
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2019
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before 3.9.17, from 3.10.0 before 3.16.10, from 4.0.0 before 4.2.6, from 4.3.0 before 4.3.5, from 4.4.0 before 4.4.3, and from 4.5.0 before 4.5.1 allows remote attackers with portal access to view arbitrary issues in Jira Service Desk projects via authorization bypass. Note that when the 'Anyone can email the service desk or raise a request in the portal' setting is enabled, an attacker can grant themselves portal access, allowing them to exploit the vulnerability.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Jira Service Desk Server
- Vendor
- Atlassian
- Product
- Jira Service Desk Server
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| unspecified | affected | custom | 3.9.17 | Unavailable | None listed |
| 3.10.0 | affected | custom | unspecified | Unavailable | None listed |
| unspecified | affected | custom | 3.16.10 | Unavailable | None listed |
| 4.0.0 | affected | custom | unspecified | Unavailable | None listed |
| unspecified | affected | custom | 4.2.6 | Unavailable | None listed |
| 4.3.0 | affected | custom | unspecified | Unavailable | None listed |
| unspecified | affected | custom | 4.3.5 | Unavailable | None listed |
| 4.4.0 | affected | custom | unspecified | Unavailable | None listed |
| unspecified | affected | custom | 4.4.3 | Unavailable | None listed |
| 4.5.0 | affected | custom | unspecified | Unavailable | None listed |
| unspecified | affected | custom | 4.5.1 | Unavailable | None listed |
Jira Service Desk Data Center
- Vendor
- Atlassian
- Product
- Jira Service Desk Data Center
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| unspecified | affected | custom | 3.9.17 | Unavailable | None listed |
| 3.10.0 | affected | custom | unspecified | Unavailable | None listed |
| unspecified | affected | custom | 3.16.10 | Unavailable | None listed |
| 4.0.0 | affected | custom | unspecified | Unavailable | None listed |
| unspecified | affected | custom | 4.2.6 | Unavailable | None listed |
| 4.3.0 | affected | custom | unspecified | Unavailable | None listed |
| unspecified | affected | custom | 4.3.5 | Unavailable | None listed |
| 4.4.0 | affected | custom | unspecified | Unavailable | None listed |
| unspecified | affected | custom | 4.4.3 | Unavailable | None listed |
| 4.5.0 | affected | custom | unspecified | Unavailable | None listed |
| unspecified | affected | custom | 4.5.1 | Unavailable | None listed |