Lucene search

K
atlassian[email protected]ATLASSIAN:CRUC-8502
HistoryNov 19, 2020 - 12:28 a.m.

Information disclosure of product SEN via the x-asen response header - CVE-2020-14192

2020-11-1900:28:33
jira.atlassian.com
37

0.001 Low

EPSS

Percentile

35.3%

Affected versions of Atlassian Fisheye and Crucible allow remote attackers to view a product’s SEN via an Information Disclosure vulnerability in the x-asen response header from Atlassian Analytics.

The affected versions are before version 4.8.4.

Affected versions:

  • version < 4.8.4

Fixed versions:

  • 4.8.4
CPENameOperatorVersion
cruciblelt4.8.4
cruciblele4.8.3

0.001 Low

EPSS

Percentile

35.3%

Related for ATLASSIAN:CRUC-8502