CVE-2019-16906

An issue was discovered in the Infosysta "In-App & Desktop Notifications" app 1.6.13_J8 for Jira. By using plugins/servlet/nfj/PushNotification?username= with a modified username, a different user's notifications can be read without authentication/authorization. These notifications are then no longer displayed to the normal user.

• CWE-306
• CWE-862

• http://packetstormsecurity.com/files/154991/Infosysta-Jira-1.6.13_J8-Push-Notification-Authentication-Bypass.htmlThird Party Advisory, VDB Entry
• https://seclists.org/bugtraq/2019/Nov/0Mailing List, Third Party Advisory
• http://packetstormsecurity.com/files/154991/Infosysta-Jira-1.6.13_J8-Push-Notification-Authentication-Bypass.htmlThird Party Advisory, VDB Entry
• https://seclists.org/bugtraq/2019/Nov/0Mailing List, Third Party Advisory

Published

Oct 31, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16900Advantech WebAccess/HMI Designer 2.1.9.31 has a User Mode Wr…7.5
• CVE-2019-16901Advantech WebAccess/HMI Designer 2.1.9.31 has Exception Hand…7.5
• CVE-2019-16902In the ARforms plugin 3.7.1 for WordPress, arf_delete_file i…7.5
• CVE-2019-16903Platinum UPnP SDK 1.2.0 allows Directory Traversal in Core/P…5.3
• CVE-2019-16904TeamPass 2.1.27.36 allows Stored XSS by setting a crafted pa…5.4
• CVE-2019-16905OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled wi…7.8
• CVE-2019-16907An issue was discovered in the Infosysta "In-App & Desktop N…5.3
• CVE-2019-16908An issue was discovered in the Infosysta "In-App & Desktop N…5.3
• CVE-2019-16909An issue was discovered in the Infosysta "In-App & Desktop N…4.3
• CVE-2019-1691A vulnerability in the detection engine of Cisco Firepower T…5.8
• CVE-2019-16910Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0,…5.3
• CVE-2019-16913PC Protect Antivirus v4.14.31 installs by default to %PROGRA…7.8