CWE Code: 862
Vulnerability Type: privilege_escalation
CVSS Score: 4.0
CWE Name:  Missing Authorization
Summary: the atlassian troubleshooting and support tools plugin prior to version 1.17.2 allows an unprivileged user to initiate periodic log scans and send the results to a user-specified email address due to a missing authorization check. the email message may contain configuration information about the application that the plugin is installed into. a vulnerable version of the plugin is included with bitbucket server / data center before 6.6.0, confluence server / data center before 7.0.1, jira server / data center before 8.3.2, crowd / crowd data center before 3.6.0, fisheye before 4.7.2, crucible before 4.7.2, and bamboo before 6.10.2.
Access Authentication: NONE
Access Complexity: UNKNOWN
Access Vector: UNKNOWN
Impact (C/I/A): NONE/NONE/NONE
Published Date: 2019-11-08
Last Modified Date: 2019-11-08