CVE-2020-4028: vulnerability in Atlassian Jira Server and Data Center
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.9%
Versions before 8.9.1, Various resources in Jira responded with a 404 instead of redirecting unauthenticated users to the login page, in some situations this may have allowed unauthorised attackers to determine if certain resources exist or not through an Information Disclosure vulnerability.
Affected products
Atlassian · Jira Server and Data CenterRelated CVEs — Atlassian Jira Server and Data Center
In the same product, most dangerous first.