CVE-2020-14179

CVE-2020-14179: falha em Atlassian Jira Server

Publicada em · Atualizada em

40Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendepss 76%
probabilidade de exploração
76%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom field names and custom SLA names via an Information Disclosure vulnerability in the /secure/QueryComponent!Default.jspa endpoint. The affected versions are before version 8.5.8, and from version 8.6.0 before 8.11.1.
Produtos afetados
Atlassian · Jira Server
CVEs relacionadas — Atlassian Jira Server

No mesmo produto, das mais perigosas para as menos.

CVE-2021-26086MEDIUMCVE-2021-26086EPSS 100.0%KEVCVE-2020-14181—CVE-2020-14181EPSS 99.6%CVE-2020-36289MEDIUMCVE-2020-36289EPSS 99.2%CVE-2022-36801MEDIUMCVE-2022-36801EPSS 66.3%CVE-2021-43942—CVE-2021-43942EPSS 55.4%CVE-2022-36799HIGHCVE-2022-36799EPSS 44.8%
Referências
https://jira.atlassian.com/browse/JRASERVER-71536