{"api_version":"1","generated_at":"2026-07-23T11:32:40+00:00","cve":"CVE-2019-5095","urls":{"html":"https://cve.report/CVE-2019-5095","api":"https://cve.report/api/cve/CVE-2019-5095.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2019-5095","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-5095"},"summary":{"title":"CVE-2019-5095","description":"An issue summary information disclosure vulnerability exists in Atlassian Jira Tempo plugin, version 4.10.0. Authenticated users can obtain the summary for issues they do not have permission to view via the Tempo plugin.","state":"PUBLIC","assigner":"talos-cna@cisco.com","published_at":"2019-10-31 20:15:00","updated_at":"2019-11-04 14:48:00"},"problem_types":["CWE-862"],"metrics":[],"references":[{"url":"https://talosintelligence.com/vulnerability_reports/TALOS-2019-0838","name":"https://talosintelligence.com/vulnerability_reports/TALOS-2019-0838","refsource":"MISC","tags":["Exploit","Third Party Advisory"],"title":"TALOS-2019-0838 ||  Cisco Talos Intelligence Group - Comprehensive Threat Intelligence","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-5095","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-5095","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2019","cve_id":"5095","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tempo","cpe5":"tempo","cpe6":"4.10.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"jira","cpe12":"*","cpe13":"*"},{"cve_year":"2019","cve_id":"5095","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tempo","cpe5":"tempo","cpe6":"4.10.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"jira","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"data_type":"CVE","data_format":"MITRE","data_version":"4.0","CVE_data_meta":{"ID":"CVE-2019-5095","ASSIGNER":"talos-cna@cisco.com","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"vendor_name":"n/a","product":{"product_data":[{"product_name":"Atlassian","version":{"version_data":[{"version_value":"Atlassian Jira 7.6.4 Atlassian Jira Tempo Core system plugin 4.10.0"}]}}]}}]}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"missing authorization"}]}]},"references":{"reference_data":[{"refsource":"MISC","name":"https://talosintelligence.com/vulnerability_reports/TALOS-2019-0838","url":"https://talosintelligence.com/vulnerability_reports/TALOS-2019-0838"}]},"description":{"description_data":[{"lang":"eng","value":"An issue summary information disclosure vulnerability exists in Atlassian Jira Tempo plugin, version 4.10.0. Authenticated users can obtain the summary for issues they do not have permission to view via the Tempo plugin."}]}},"nvd":{"publishedDate":"2019-10-31 20:15:00","lastModifiedDate":"2019-11-04 14:48:00","problem_types":["CWE-862"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":1.4},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4},"severity":"MEDIUM","exploitabilityScore":8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:tempo:tempo:4.10.0:*:*:*:*:jira:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2019","CveId":"5095","Ordinal":"142711","Title":"CVE-2019-5095","CVE":"CVE-2019-5095","Year":"2019"},"notes":[{"CveYear":"2019","CveId":"5095","Ordinal":"1","NoteData":"An issue summary information disclosure vulnerability exists in Atlassian Jira Tempo plugin, version 4.10.0. Authenticated users can obtain the summary for issues they do not have permission to view via the Tempo plugin.","Type":"Description","Title":null},{"CveYear":"2019","CveId":"5095","Ordinal":"2","NoteData":"2019-10-31","Type":"Other","Title":"Published"},{"CveYear":"2019","CveId":"5095","Ordinal":"3","NoteData":"2019-10-31","Type":"Other","Title":"Modified"}]}}}