How severe is CVE-2019-20105?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 4.9 out of 10.

What type of vulnerability is CVE-2019-20105?

This is classified as CWE-306, which is a common weakness in software security.

CVE-2019-20105 - MEDIUM Severity | CVSS 4.9

Vulnerability Description

The EditApplinkServlet resource in the Atlassian Application Links plugin before version 5.4.20, from version 6.0.0 before version 6.0.12, from version 6.1.0 before version 6.1.2, from version 7.0.0 before version 7.0.1, and from version 7.1.0 before version 7.1.3 allows remote attackers who have obtained access to administrator's session to access the EditApplinkServlet resource without needing to re-authenticate to pass "WebSudo" in products that support "WebSudo" through an improper access control vulnerability.

Related Vulnerabilities

CVE-2020-19670

MEDIUM

CVSS:4.9(Medium)

In Niushop B2B2C Multi-Business Basic Edition V1.11, authentication can be bypassed, causing administrators to reset any passwords.

CWE-3062020

CVE-2021-32659

MEDIUM

CVSS:4.9(Medium)

Matrix-appservice-bridge is the bridging service for the Matrix communication program's application services. In versions 2.6.0 and earlier, if a bridge has room upgrade handling turned on in the conf...

CWE-3062021

CVE-2021-32709

MEDIUM

CVSS:4.9(Medium)

Shopware is an open source eCommerce platform. Creation of order credits was not validated by ACL in admin orders. Users are recommend to update to the current version 6.4.1.1. You can get the update ...

CWE-3062021

CVE-2023-30612

MEDIUM

CVSS:4.9(Medium)

Cloud hypervisor is a Virtual Machine Monitor for Cloud workloads. This vulnerability allows users to close arbitrary open file descriptors in the Cloud Hypervisor process via sending malicious HTTP r...

CWE-3062023

CVE-2024-57055

MEDIUM

CVSS:5.0(Medium)

Server-Side Access Control Bypass vulnerability in WombatDialer before 25.02 could allow unauthorized users to potentially call certain services without the necessary access level. This issue is limit...

CWE-3062024

CVE-2020-4471

MEDIUM

CVSS:4.8(Medium)

IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow an unauthenticated attacker to cause a denial of service or hijack DNS sessions by send a specially crafted HTTP command to the remote serve...

CWE-3062020