Atlassian Jira Gadgets Plugin Authentication Bypass (CVE-2020-36287)

An authentication bypass vulnerability exists in Atlassian Jira Gadgets Plugin. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

Exploit for Missing Authorization in Atlassian Data_Center

CVE-2020-36287 The dashboard gadgets preference resource of th...

CVE-2020-36287

Summary: CVE-2020-36287 affects Atlassian Jira Server/Data Center through the dashboard gadgets preference resource of the Atlassian gadgets plugin. The root cause is a missing permissions check, enabling remote anonymous access to gadget-related settings. Affected versions: Jira Server prior to ...

Anonymously accessible Dashboards can leak private information via configured gadgets - CVE-2020-36287

The dashboard gadgets preference resource of the Atlassian gadgets plugin used in Jira Server and Jira Data Center before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to obtain gadget related settings via a missing permissions check. Affected...