[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fzz7hZyijDKBZGS3URAHQc-h6ALz13NIAOfGjI0bluR8":3,"g5a-risk:CVE-2019-15005":155},{"success":4,"data":5,"meta":153},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":37,"references":69,"referencesCount":80,"weaknesses":81,"weaknessesCount":90,"isActivelyExploited":91,"cisaInfo":26,"otxData":26,"relatedBlogPosts":92,"seoMetadata":93,"configurations":118,"relatedVendorCves":151,"notableEvents":152},"CVE-2019-15005","What is CVE-2019-15005?","The Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an unprivileged user to initiate periodic log scans and send the results to a user-specified email address due to a missing authorization check. The email message may contain configuration information about the application that the plugin is installed into. A vulnerable version of the plugin is included with Bitbucket Server \u002F Data Center before 6.6.0, Confluence Server \u002F Data Center before 7.0.1, Jira Server \u002F Data Center before 8.3.2, Crowd \u002F Crowd Data Center before 3.6.0, Fisheye before 4.7.2, Crucible before 4.7.2, and Bamboo before 6.10.2.","The Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an unprivileged user to initiate periodic log scans and send the result...","2019-11-08T04:15:10.307","2019-11-14T21:15:11.437",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,2.8,1.4,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":34,"ConfidentialityImpact":35,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:N\u002FA:N","SINGLE","PARTIAL",4,8,2.9,0.01334,[39,39,39,39,39,39,39],"Medium",[43,48,51,54,57,60,63,66],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"atlassian","troubleshooting_and_support","*","cpe:2.3:a:atlassian:troubleshooting_and_support:*:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":46,"criteria":50,"vulnerable":4},"bamboo","cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:*",{"vendor":44,"product":52,"version":46,"criteria":53,"vulnerable":4},"bitbucket","cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*",{"vendor":44,"product":55,"version":46,"criteria":56,"vulnerable":4},"confluence","cpe:2.3:a:atlassian:confluence:*:*:*:*:*:*:*:*",{"vendor":44,"product":58,"version":46,"criteria":59,"vulnerable":4},"crowd","cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:*",{"vendor":44,"product":61,"version":46,"criteria":62,"vulnerable":4},"crucible","cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:*",{"vendor":44,"product":64,"version":46,"criteria":65,"vulnerable":4},"fisheye","cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:*",{"vendor":44,"product":67,"version":46,"criteria":68,"vulnerable":4},"jira","cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*",[70,74],{"url":71,"source":72,"tags":73},"https:\u002F\u002Fherolab.usd.de\u002Fsecurity-advisories\u002Fusd-2019-0016\u002F","Usd",[],{"url":75,"source":76,"tags":77},"https:\u002F\u002Fjira.atlassian.com\u002Fbrowse\u002FBAM-20647","Atlassian",[78,79],"Issue Tracking","Vendor Advisory",2,[82],{"id":83,"name":84,"description":85,"extendedDescription":86,"status":87,"abstraction":88,"structure":89},"CWE-862","Missing Authorization","The product does not perform an authorization check when an actor attempts to access a resource or perform an action.","Assuming a user with a given identity, authorization is the process of determining whether that user can access a given resource, based on the user's privileges and any permissions or other access-control specifications that apply to the resource.\nWhen access control checks are not applied, users are able to access data or perform actions that they should not be allowed to perform. This can lead to a wide range of problems, including information exposures, denial of service, and arbitrary code execution.","Incomplete","Class","Simple",1,false,[],{"title":94,"metaDescription":95,"keywords":96,"canonicalUrl":97,"structuredData":98},"What is CVE-2019-15005? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-15005, a medium severity cyber security vulnerability from 2019. The Atlassian Troubleshooting and Support Tools plugin pr...","CVE-2019-15005, CVE-2019-15005 vulnerability, CVE-2019-15005 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, atlassian security, troubleshooting_and_support vulnerability, bamboo vulnerability, bitbucket vulnerability, confluence vulnerability, crowd vulnerability","\u002Fwhat-is\u002Fcve-2019-15005",{"@context":99,"@type":100,"headline":94,"description":95,"datePublished":10,"dateModified":11,"author":101,"publisher":105,"about":109,"mainEntityOfPage":113,"articleSection":116,"keywords":117},"https:\u002F\u002Fschema.org","TechArticle",{"@type":102,"name":103,"url":104},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":102,"name":103,"url":104,"logo":106},{"@type":107,"url":108},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":110,"name":6,"description":111,"additionalType":112},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":114,"@id":115},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-15005","Cybersecurity","CVE-2019-15005, CVE-2019-15005 vulnerability, CVE-2019-15005 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[119,127],{"Operator":26,"Negate":26,"Nodes":120},[121],{"Operator":122,"Negate":26,"CPEMatch":123},"OR",[124],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":125,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":126,"VersionEndIncluding":26},"093A33BE-D93B-4CBC-9BF3-B37207CBAD84","1.17.2",{"Operator":26,"Negate":26,"Nodes":128},[129],{"Operator":122,"Negate":26,"CPEMatch":130},[131,134,137,140,143,146,148],{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":132,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":133,"VersionEndIncluding":26},"A17D5A1F-2408-4768-9DC3-F850B21B64AD","6.10.2",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":135,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":136,"VersionEndIncluding":26},"BF79AB35-E420-4475-AD28-FC219C636C8B","6.6.0",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":138,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":139,"VersionEndIncluding":26},"EC203A88-CA6B-4F1A-A68D-9C2CDE8F67FC","7.0.1",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":141,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":142,"VersionEndIncluding":26},"1361951B-0754-45FF-96E4-8A886C24411B","3.6.0",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":144,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":145,"VersionEndIncluding":26},"40EB5F54-C9BD-4299-A616-E3A8E20C77FB","4.7.2",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":147,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":145,"VersionEndIncluding":26},"452D57FA-0A0B-486F-9D4B-45487B68FFB9",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":149,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":150,"VersionEndIncluding":26},"76FE371E-3000-464E-ADEE-033BF2989429","8.3.2",[],[],{"lastModified":11,"cacheTime":154,"version":32},1792453338071,{"score":156,"band":157,"action":158,"scoredAt":159},17,"Info","Track","2026-10-16T06:47:12.641085+00:00"]