CVE-2019-15003: The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before...

Security readout for executives and security teams

This flaw could let someone with Jira Service Desk portal access view issues they should not see. If open portal request creation is enabled, an outsider may be able to give themselves portal access first. The main business risk is unauthorized exposure of customer tickets, internal incidents, and sensitive support data. Exposure is likely where Jira Service Desk Server or Data Center is running in the listed version ranges. Risk is higher for internet-facing portals and instances where anyone can email the service desk or raise a portal request. Treat this as a priority data exposure issue, especially for externally reachable service desks. It does not indicate code execution, but support tickets often contain sensitive customer, security, and operational information. Mitigation focus: Upgrade to a fixed Jira Service Desk Server or Data Center version named by Atlassian.; Review whether open portal request creation is enabled and restrict it if not required.; Limit portal exposure to trusted users or networks where operationally feasible..

Prepared

Jun 6, 2026, 12:31 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.