Description
Affected versions of Jira Server & Data Center allow a remote attacker with limited (non-admin) privileges to view a Jira instance's Support Entitlement Number (SEN) via an Information Disclosure vulnerability in the HTTP Response headers. The affected versions are before version 7.13.18, from version 8.0.0 before 8.5.9, and from version 8.6.0 before 8.12.1.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Atlassian | Jira Server | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2020-6340 | Affected versions of Jira Server & Data Center allow a remote attacker with limited (non-admin) privileges to view a Jira instance's Support Entitlement Number (SEN) via an Information Disclosure vulnerability in the HTTP Response headers. The affected versions are before version 7.13.18, from version 8.0.0 before 8.5.9, and from version 8.6.0 before 8.12.1. |
References
| Link | Providers |
|---|---|
| https://jira.atlassian.com/browse/JRASERVER-71646 |
|
History
No history.
MITRE
Status: PUBLISHED
Assigner: atlassian
Published:
Updated: 2024-09-17T02:16:18.539Z
Reserved: 2020-06-16T00:00:00.000Z
Link: CVE-2020-14183
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-10-06T23:15:12.040
Modified: 2024-11-21T05:02:49.540
Link: CVE-2020-14183
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses