Lucene search

CVE-2020-36235

🗓️ 15 Feb 2021 00:12:15Reported by atlassianType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 80 Views

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field and custom SLA names via an Information Disclosure vulnerability in the mobile site view

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 5
Tenable Nessus	Atlassian JIRA < 8.13.2 / 8.14.x < 8.14.1 Information Disclosure (JRASERVER-71950)	19 Feb 202100:00	–	nessus
Cvelist	CVE-2020-36235	14 Feb 202123:45	–	cvelist
Prion	Information disclosure	15 Feb 202100:15	–	prion
NVD	CVE-2020-36235	15 Feb 202100:15	–	nvd
CNVD	Atlassian Jira Information Disclosure Vulnerability (CNVD-2021-13209)	25 Feb 202100:00	–	cnvd

Nvd

Node

atlassian jiraRange<8.13.2

atlassian jira_serverRange8.14.0–8.14.1

atlassian jira_software_data_centerRange<8.13.2

atlassian jira_software_data_centerRange8.14.0–8.14.1

[
  {
    "product": "Jira Server",
    "vendor": "Atlassian",
    "versions": [
      {
        "lessThan": "8.13.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "8.14.0",
        "versionType": "custom"
      },
      {
        "lessThan": "8.14.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Jira Data Center",
    "vendor": "Atlassian",
    "versions": [
      {
        "lessThan": "8.13.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "8.14.0",
        "versionType": "custom"
      },
      {
        "lessThan": "8.14.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
jira	www.jira.atlassian.com/browse/JRASERVER-71950

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Feb 2021 00:15Current

5.1Medium risk

Vulners AI Score5.1

CVSS25

CVSS35.3

EPSS0.00947