Lucene search
Security-metrics-botATLASSIAN:JRASERVER-71275HistoryJul 09, 2020 - 5:35 a.m.
IDOR Disclosure of Private Project Titles - CVE-2020-14174
2020-07-0905:35:29
security-metrics-bot
jira.atlassian.com
40
0.001 Low
EPSS
Percentile
35.5%
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view titles of a private project via an Insecure Direct Object References (IDOR) vulnerability in the Administration Permission Helper.
Affected versions:
- version < 7.13.16
- 8.0.0 ≤ version < 8.5.7
- 8.6.0 ≤ version < 8.9.2
- 8.10.0 ≤ version < 8.10.1
Fixed versions:
- 7.13.16
- 8.5.7
- 8.9.2
- 8.10.1
- 8.11.0
Related
nessus
nessus
cvelist
cvelist
CVE-2020-14174
2020-07-08 00:00:00
prion
prion
Spoofing
2020-07-13 05:15:00
nvd
nvd
CVE-2020-14174
2020-07-13 05:15:11
cve
cve
CVE-2020-14174
2020-07-13 05:15:11
atlassian
atlassian
IDOR (Insecure direct object references) in Jira 8.13.10
2022-05-17 09:43:30
IDOR Disclosure of Private Project Titles - CVE-2020-14174
2020-07-09 05:35:29