CVE-2020-14168

2020-07-0100:00:00

atlassian

www.cve.org

5.6 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.9%

JSON

The email client in Jira Server and Data Center before version 7.13.16, from 8.5.0 before 8.5.7, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to access outgoing emails between a Jira instance and the SMTP server via man-in-the-middle (MITM) vulnerability.

CNA Affected

[
  {
    "product": "Jira Server and Data Center",
    "vendor": "Atlassian",
    "versions": [
      {
        "lessThan": "7.13.16",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "8.5.0",
        "versionType": "custom"
      },
      {
        "lessThan": "8.5.7",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "8.8.0",
        "versionType": "custom"
      },
      {
        "lessThan": "8.8.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "8.9.0",
        "versionType": "custom"
      },
      {
        "lessThan": "8.9.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

jira.atlassian.com/browse/JRASERVER-71198