{"id":"CVE-2019-15011","state":"PUBLISHED","title":"The ListEntityLinksServlet resource in Application Links before version 5.0.12, from version 5.1.0 before version 5.2.11, from version 5.3.0 before version 5.3.7, from version 5.4.","description":"The ListEntityLinksServlet resource in Application Links before version 5.0.12, from version 5.1.0 before version 5.2.11, from version 5.3.0 before version 5.3.7, from version 5.4.0 before 5.4.13, and from version 6.0.0 before 6.0.5 disclosed application link information to non-admin users via a missing permissions check.","publishedAt":"2019-12-17T03:45:14.059Z","updatedAt":"2024-09-16T19:50:47.187Z","severity":null,"assigner":"atlassian","products":["Atlassian Application Links"],"affected":[{"vendor":"Atlassian","product":"Application Links","versions":[{"version":"unspecified","status":"affected","lessThan":"5.0.12","versionType":"custom"},{"version":"5.1.0","status":"affected","lessThan":"unspecified","versionType":"custom"},{"version":"unspecified","status":"affected","lessThan":"5.2.11","versionType":"custom"},{"version":"5.3.0","status":"affected","lessThan":"unspecified","versionType":"custom"},{"version":"unspecified","status":"affected","lessThan":"5.3.7","versionType":"custom"},{"version":"5.4.0","status":"affected","lessThan":"unspecified","versionType":"custom"},{"version":"unspecified","status":"affected","lessThan":"5.4.13","versionType":"custom"},{"version":"6.0.0","status":"affected","lessThan":"unspecified","versionType":"custom"},{"version":"unspecified","status":"affected","lessThan":"6.0.5","versionType":"custom"}]}],"references":["https://ecosystem.atlassian.net/browse/APL-1386"],"weaknesses":[],"ingestedAt":"2026-10-29T19:45:33.607Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/15xxx/CVE-2019-15011.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-15011","state":"PUBLISHED","datePublished":"2019-12-17T03:45:14.059Z","dateUpdated":"2024-09-16T19:50:47.187Z","assignerShortName":"atlassian","assignerOrgId":"f08a6ab8-ed46-4c22-8884-d911ccfe3c66","dateReserved":"2019-08-13T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"The ListEntityLinksServlet resource in Application Links before version 5.0.12, from version 5.1.0 before version 5.2.11, from version 5.3.0 before version 5.3.7, from version 5.4.0 before 5.4.13, and from version 6.0.0 before 6.0.5 disclosed application link information to non-admin users via a missing permissions check."}],"affected":[{"vendor":"Atlassian","product":"Application Links","versions":[{"version":"unspecified","status":"affected","lessThan":"5.0.12","versionType":"custom"},{"version":"5.1.0","status":"affected","lessThan":"unspecified","versionType":"custom"},{"version":"unspecified","status":"affected","lessThan":"5.2.11","versionType":"custom"},{"version":"5.3.0","status":"affected","lessThan":"unspecified","versionType":"custom"},{"version":"unspecified","status":"affected","lessThan":"5.3.7","versionType":"custom"},{"version":"5.4.0","status":"affected","lessThan":"unspecified","versionType":"custom"},{"version":"unspecified","status":"affected","lessThan":"5.4.13","versionType":"custom"},{"version":"6.0.0","status":"affected","lessThan":"unspecified","versionType":"custom"},{"version":"unspecified","status":"affected","lessThan":"6.0.5","versionType":"custom"}]}],"references":[{"url":"https://ecosystem.atlassian.net/browse/APL-1386","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"Information Exposure","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"atlassian","dateUpdated":"2019-12-17T03:45:13.000Z","orgId":"f08a6ab8-ed46-4c22-8884-d911ccfe3c66"},"datePublic":"2019-12-17T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security@atlassian.com","DATE_PUBLIC":"2019-12-17T00:00:00","ID":"CVE-2019-15011","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Application Links","version":{"version_data":[{"version_affected":"<","version_value":"5.0.12"},{"version_affected":">=","version_value":"5.1.0"},{"version_affected":"<","version_value":"5.2.11"},{"version_affected":">=","version_value":"5.3.0"},{"version_affected":"<","version_value":"5.3.7"},{"version_affected":">=","version_value":"5.4.0"},{"version_affected":"<","version_value":"5.4.13"},{"version_affected":">=","version_value":"6.0.0"},{"version_affected":"<","version_value":"6.0.5"}]}}]},"vendor_name":"Atlassian"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The ListEntityLinksServlet resource in Application Links before version 5.0.12, from version 5.1.0 before version 5.2.11, from version 5.3.0 before version 5.3.7, from version 5.4.0 before 5.4.13, and from version 6.0.0 before 6.0.5 disclosed application link information to non-admin users via a missing permissions check."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Information Exposure"}]}]},"references":{"reference_data":[{"name":"https://ecosystem.atlassian.net/browse/APL-1386","refsource":"MISC","url":"https://ecosystem.atlassian.net/browse/APL-1386"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://ecosystem.atlassian.net/browse/APL-1386","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T00:34:53.139Z"}}]}}}