CVE-2006-3339 Information disclosure in n/a

What is CVE-2006-3339?

CVE-2006-3339 is a medium-severity vulnerability in Atlassian Jira, published on 3 Jul 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

secure/ConfigureReleaseNote.jspa in Atlassian JIRA 3.6.2-#156 allows remote attackers to obtain sensitive information via unspecified manipulations of the projectId parameter, which displays the installation path and other system information in an error message.

Which versions are affected by CVE-2006-3339?

It affects 1 product.

Products include Atlassian Jira.

How do I fix CVE-2006-3339?

No fix has been published for CVE-2006-3339 yet. Limit exposure of the affected software until one is available.

Is CVE-2006-3339 being exploited?

There is no known exploitation of CVE-2006-3339 in the wild and no public exploit code.

Other vulnerabilities in Atlassian Jira

• CVE-2020-14172 Deserialization in Jira Server Critical 9.8
• CVE-2019-20409 Code injection in Jira Server Critical 9.8
• CVE-2017-5983 Deserialization in n/a Critical 9.8
• CVE-2010-1165 Code injection in n/a Critical 9.0
• CVE-2016-4319 Cross-site request forgery in Atlassian JIRA Server before 7.1.9 High 8.8

All Atlassian Jira vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-344x-g5pc-f6x4.