Internal

**Name of the Vulnerable Software and Affected Versions** Crowd Data Center version 7.2.1 **Description** An issue involving Broken Authentication and Session Management (BASM) allows an unauthenticated attacker to perform actions as another user. **Recommendations** Upgrade to version 7.2.2 or a later release.

**Name of the Vulnerable Software and Affected Versions** Pentaho Data Integration and Analytics Community Dashboard Framework versions prior to 10.2.0.4 Pentaho Data Integration and Analytics Community Dashboard Framework versions 8.3.x Pentaho Data Integration and Analytics Community Dashboard Framework versions 9.3.0.x **Description** The Pentaho Data Integration and Analytics Community Dashboard Framework reveals the complete server stack trace when an error occurs within the `GetCdfResource` servlet. This disclosure of sensitive information could potentially aid attackers in understanding the system's internal workings. **Recommendations** Update to Pentaho Data Integration and Analytics Community Dashboard Framework version 10.2.0.4 or later. Update to a version later than 9.3.0.x. Update to a version later than 8.3.x.

**Name of the Vulnerable Software and Affected Versions** Jira Core Data Center and Server versions 9.12.0 through 10.5.0 Jira Service Management Data Center and Server versions 5.12.0 through 10.5.0 **Description** This issue allows an attacker to perform actions as a higher-privileged user. The vulnerability was reported via Atlassian's internal program. It is estimated that over 95,000 results are found on a search engine, and over 75,000 services are affected. **Recommendations** Jira Core Data Center and Server 9.12: Upgrade to a release greater than or equal to 9.12.20 Jira Service Management Data Center and Server 5.12: Upgrade to a release greater than or equal to 5.12.20 Jira Core Data Center 10.3: Upgrade to a release greater than or equal to 10.3.5 Jira Service Management Data Center 10.3: Upgrade to a release greater than or equal to 10.3.5 Jira Core Data Center 10.4: Upgrade to a release greater than or equal to 10.6.0 Jira Service Management Data Center 10.4: Upgrade to a release greater than or equal to 10.6.0 Jira Core Data Center 10.5: Upgrade to a release greater than or equal to 10.5.1 Jira Service Management Data Center 10.5: Upgrade to a release greater than or equal to 10.5.1