CVE-2020-4029 in JIRA Server

Tóm tắt

Bởi MITRE

The /rest/project-templates/1.0/createshared resource in Atlassian Jira Server and Data Center before version 8.5.5, from 8.6.0 before 8.7.2, and from 8.8.0 before 8.8.1 allows remote attackers to enumerate project names via an improper authorization vulnerability.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Đặt trước: 30/12/2019
• Kiểm duyệt: được chấp nhận
• mục: VDB-157561
• CPE: sẵn sàng
• CWE: CWE-863 (Đã xác nhận)
• CVSS: 4.3 (NVD)
• EPSS: 0.01448
• KEV: không
• Các hoạt động: rất thấp
• ngành: Hostingprovider, Finance, ...

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-4029
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-4029
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-4029/