Lucene search

K
atlassian[email protected]ATLASSIAN:FE-7334
HistoryNov 19, 2020 - 12:25 a.m.

Information disclosure of product SEN via the x-asen response header - CVE-2020-14192

2020-11-1900:25:23
jira.atlassian.com
49

0.001 Low

EPSS

Percentile

35.5%

Affected versions of Atlassian Fisheye and Crucible allow remote attackers to view a product’s SEN via an Information Disclosure vulnerability in the x-asen response header from Atlassian Analytics.

The affected versions are before version 4.8.4.

Affected versions:

  • version < 4.8.4

Fixed versions:

  • 4.8.4
CPENameOperatorVersion
fisheyele4.8.3
fisheyelt4.8.4

0.001 Low

EPSS

Percentile

35.5%

Related for ATLASSIAN:FE-7334