Lucene search
AtlassianCVELIST:CVE-2020-36289HistoryMay 12, 2021 - 3:30 a.m.
CVE-2020-36289
2021-05-1203:30:12
atlassian
www.cve.org
6
atlassian jira
information disclosure
vulnerability
user enumeration
cve-2020-36289
Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the QueryComponentRendererValue!Default.jspa endpoint. The affected versions are before version 8.5.13, from version 8.6.0 before 8.13.5, and from version 8.14.0 before 8.15.1.
CNA Affected
[
{
"product": "Jira Server",
"vendor": "Atlassian",
"versions": [
{
"lessThan": "8.5.13",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "unspecified",
"status": "affected",
"version": "8.6.0",
"versionType": "custom"
},
{
"lessThan": "8.13.5",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "unspecified",
"status": "affected",
"version": "8.14.0",
"versionType": "custom"
},
{
"lessThan": "8.15.1",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "Jira Data Center",
"vendor": "Atlassian",
"versions": [
{
"lessThan": "8.5.13",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "unspecified",
"status": "affected",
"version": "8.6.0",
"versionType": "custom"
},
{
"lessThan": "8.13.5",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "unspecified",
"status": "affected",
"version": "8.14.0",
"versionType": "custom"
},
{
"lessThan": "8.15.1",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
prion
prion
Information disclosure
2021-05-12 04:15:00
nessus
nessus
Atlassian Jira 8.6.x < 8.13.7 Multiple Vulnerabilities
2021-07-02 00:00:00
Atlassian Jira < 8.5.15 Multiple Vulnerabilities
2021-07-02 00:00:00
Atlassian Jira 8.14.x < 8.17.0 Multiple Vulnerabilities
2021-07-02 00:00:00
seebug
seebug
Atlassian Jira 信息泄露漏洞（CVE-2020-36289）
2021-06-10 00:00:00
nuclei
nuclei
Jira Server and Data Center - Information Disclosure
2021-06-09 15:43:52
atlassian
atlassian
nvd
nvd
CVE-2020-36289
2021-05-12 04:15:07
cve
cve
CVE-2020-36289
2021-05-12 04:15:07