Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:CRUC-8468
HistoryApr 16, 2020 - 7:26 p.m.

Security misconfiguration in the /json/fe/activeUserFinder.do resource - CVE-2020-4015

2020-04-1619:26:26
security-metrics-bot
jira.atlassian.com
31

0.001 Low

EPSS

Percentile

32.3%

The /json/fe/activeUserFinder.do resource in Altassian Fisheye and Crucible before version 4.8.1 allows remote attackers to view user user email addresses via a security misconfiguration.

CPENameOperatorVersion
cruciblelt4.8.1
cruciblele4.8.0

0.001 Low

EPSS

Percentile

32.3%

Related for ATLASSIAN:CRUC-8468