Unscored severity · published Jul 3, 2006
CVE-2006-3339
secure/ConfigureReleaseNote.jspa in Atlassian JIRA 3.6.2-#156 allows remote attackers to obtain sensitive information via unspecified manipulations of the projectId parameter,…
–
CVSS
1.4%
EPSS
No
On KEV
Description
secure/ConfigureReleaseNote.jspa in Atlassian JIRA 3.6.2-#156 allows remote attackers to obtain sensitive information via unspecified manipulations of the projectId parameter, which displays the installation path and other system information in an error message.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JI
Jira · Atlassian
3.6.2_156 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3339
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3339
jira.atlassian.com
http://jira.atlassian.com/browse/JRA-10542
pridels0.blogspot.com
http://pridels0.blogspot.com/2006/06/atlassian-jira-information-disclosure.html
www.osvdb.org
http://www.osvdb.org/26745
www.vupen.com
http://www.vupen.com/english/advisories/2006/2472
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/27235
More from Jira
9.8
CVE-2019-11581
Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability
5.3
CVE-2021-26086
Atlassian Jira Server and Data Center Path Traversal Vulnerability
9.8
CVE-2022-26136
A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps
9.8
CVE-2022-0540
A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request
9.8
CVE-2020-14172
This issue exists to document that a security improvement in the way that Jira Server and Data Center use velocity templates has been implemented