CVE-2019-20410: 
JIRA vulnerability analysis and mitigation

Atlassian Jira Server and Data Center were affected by an Information Disclosure vulnerability (CVE-2019-20410) in the comment restriction feature. The vulnerability was discovered and disclosed in early 2020, affecting multiple versions including those before 7.6.17, versions from 7.7.0 before 7.13.9, and versions from 8.0.0 before 8.4.2 (Atlassian Jira, CVE Mitre).

The vulnerability was classified with a CVSS 2.0 score of 7.5 and a CVSS 3.0 score of 10.0, indicating a critical severity level. The vulnerability specifically affected the comment restriction feature of Jira Server and Data Center installations (ManageEngine).

The vulnerability allowed remote attackers to access and view sensitive information through the comment restriction feature in affected Jira installations (CVE Mitre).

The vulnerability required network access and no authentication for exploitation, as indicated by the CVSS metrics (AV:N/Au:N/AC:L). No specific exploits in the wild were publicly documented (ManageEngine).

Atlassian addressed this vulnerability by releasing fixed versions: 7.6.17, 7.13.9, 8.4.2, and 8.5.0. Users of affected versions were advised to upgrade to these patched versions to mitigate the security risk (Atlassian Jira).