Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:FE-7284
HistoryApr 16, 2020 - 7:26 p.m.

Security misconfiguration in the /json/fe/activeUserFinder.do resource - CVE-2020-4015

2020-04-1619:26:08
security-metrics-bot
jira.atlassian.com
41

0.001 Low

EPSS

Percentile

32.1%

The /json/fe/activeUserFinder.do resource in Altassian Fisheye and Crucible before version 4.8.1 allows remote attackers to view user user email addresses via a security misconfiguration.

CPENameOperatorVersion
fisheyelt4.8.1
fisheyele4.8.0

0.001 Low

EPSS

Percentile

32.1%

Related for ATLASSIAN:FE-7284