Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:JRASERVER-70926
HistoryApr 20, 2020 - 6:02 a.m.

Improper authorization on /rest/project-templates/1.0/createshared endpoint - CVE-2020-4029

2020-04-2006:02:15
security-metrics-bot
jira.atlassian.com
58

0.001 Low

EPSS

Percentile

35.5%

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate project names via an improper authorization vulnerability in the /rest/project-templates/1.0/createshared endpoint API endpoint.

Affected versions:

  • version < 8.5.5
  • 8.6.0 ā‰¤ version < 8.7.2
  • 8.8.0 ā‰¤ version < 8.8.1

Fixed versions:

  • 8.5.5
  • 8.7.2
  • 8.8.1
  • 8.9.0

0.001 Low

EPSS

Percentile

35.5%

Related for ATLASSIAN:JRASERVER-70926