Lucene search
Security-metrics-botATLASSIAN:JRASERVER-72258HistoryMar 25, 2021 - 3:53 a.m.
Anonymously accessible Dashboards can leak private information via configured gadgets - CVE-2020-36287
2021-03-2503:53:46
security-metrics-bot
jira.atlassian.com
24
anonymously accessible
dashboards
atlassian gadgets
jira server
jira data center
cve-2020-36287
remote attackers
permissions check
fixed versions
EPSS
0.001
Percentile
41.1%
The dashboard gadgets preference resource of the Atlassian gadgets plugin used in Jira Server and Jira Data Center before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to obtain gadget related settings via a missing permissions check.
Affected versions:
- version < 8.13.5
- 8.14.0 ≤ version < 8.15.1
Fixed versions:
- 8.13.5
- 8.15.1
Related
cve
cve
CVE-2020-36287
2021-04-09 02:15:12
checkpoint_advisories
checkpoint_advisories
Atlassian Jira Gadgets Plugin Authentication Bypass (CVE-2020-36287)
2021-09-22 00:00:00
cnvd
cnvd
Atlassian Jira Server and Jira Data Center have unspecified vulnerabilities
2021-04-22 00:00:00
prion
prion
Open redirect
2021-04-09 02:15:00
nvd
nvd
CVE-2020-36287
2021-04-09 02:15:12
cvelist
cvelist
CVE-2020-36287
2021-04-09 02:00:14
atlassian
atlassian
githubexploit
githubexploit
Exploit for Incorrect Authorization in Atlassian Data Center
2021-08-02 01:52:39