CVE-2020-36289mediumCWE-863

CVE-2020-36289: falha de média gravidade em Atlassian Jira Server

Publicada em · Atualizada em

50Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendcvss 5.3epss 99%
probabilidade de exploração
99%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the QueryComponentRendererValue!Default.jspa endpoint. The affected versions are before version 8.5.13, from version 8.6.0 before 8.13.5, and from version 8.14.0 before 8.15.1.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
Atlassian · Jira Data CenterAtlassian · Jira Server
CVEs relacionadas — Atlassian Jira Server

No mesmo produto, das mais perigosas para as menos.

CVE-2021-26086MEDIUMCVE-2021-26086EPSS 100.0%KEVCVE-2020-14181—CVE-2020-14181EPSS 99.6%CVE-2020-14179—CVE-2020-14179EPSS 76.0%CVE-2022-36801MEDIUMCVE-2022-36801EPSS 66.3%CVE-2021-43942—CVE-2021-43942EPSS 55.4%CVE-2020-36239CRITICALCVE-2020-36239EPSS 49.8%
Referências
https://jira.atlassian.com/browse/JRASERVER-71559