Lucene search

K
cvelistAtlassianCVELIST:CVE-2020-4017
HistoryJun 01, 2020 - 6:35 a.m.

CVE-2020-4017

2020-06-0106:35:31
atlassian
www.cve.org
3

AI Score

5.2

Confidence

High

EPSS

0.002

Percentile

58.5%

The /rest/jira-ril/1.0/jira-rest/applinks resource in the crucible-jira-ril plugin in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to get information about any configured Jira application links via an information disclosure vulnerability.

CNA Affected

[
  {
    "product": "Crucible",
    "vendor": "Atlassian",
    "versions": [
      {
        "lessThan": "4.8.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Fisheye",
    "vendor": "Atlassian",
    "versions": [
      {
        "lessThan": "4.8.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

AI Score

5.2

Confidence

High

EPSS

0.002

Percentile

58.5%

Related for CVELIST:CVE-2020-4017