Lucene search
Security-metrics-botATLASSIAN:JRASERVER-71185HistoryJun 16, 2020 - 3:04 a.m.
Improper authorization in Project Administration - Others - CVE-2020-14165
2020-06-1603:04:05
security-metrics-bot
jira.atlassian.com
13
0.002 Low
EPSS
Percentile
56.6%
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to obtain information about custom project avatars via an improper authorization vulnerability in the UniversalAvatarResource.getAvatars resource.
Affected versions:
- version < 8.9.0
Fixed versions:
- 8.9.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| jira server and data center | lt | 8.9.0 | |
| jira server and data center | le | 8.5.1 |
Related
nvd
nvd
CVE-2020-14165
2020-07-01 02:15:11
atlassian
atlassian
Improper authorization in Project Administration - Others - CVE-2020-14165
2020-06-16 03:04:05
cve
cve
CVE-2020-14165
2020-07-01 02:15:11
prion
prion
Authorization
2020-07-01 02:15:00
cvelist
cvelist
CVE-2020-14165
2020-07-01 00:00:00