Lucene search
K

4 matches found

CVE
CVE
added 2020/06/01 6:35 a.m.63 views

CVE-2020-4014

The CVE-2020-4014 vulnerability affects Atlassian Fisheye and Crucible before version 4.8.1. The issue resides in the /profile/deleteWatch.do resource, where improper authorization allows remote attackers to remove another user’s repository watching settings. Impact is limited to unauthorized mod...

4.3CVSS4.6AI score0.00765EPSS
Exploits0References2Affected Software2
Atlassian
Atlassian
added 2020/04/16 6:58 p.m.35 views

Improper authorization vulnerablity in the /profile/deleteWatch.do resource- CVE-2020-4014

The /profile/deleteWatch.do resource in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to remove another user's watching settings for a repository via an improper authorization vulnerability...

4.3CVSS5.1AI score0.00765EPSS
Exploits0
Atlassian
Atlassian
added 2020/04/16 6:58 p.m.53 views

Improper authorization vulnerablity in the /profile/deleteWatch.do resource- CVE-2020-4014

The /profile/deleteWatch.do resource in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to remove another user's watching settings for a repository via an improper authorization vulnerability...

4.3CVSS5.9AI score0.00765EPSS
Exploits0Affected Software1
Atlassian
Atlassian
added 2020/04/16 6:55 p.m.72 views

Improper authorization vulnerablity in the /profile/deleteWatch.do resource- CVE-2020-4014

The /profile/deleteWatch.do resource in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to remove another user's watching settings for a repository via an improper authorization vulnerability...

4.3CVSS5.9AI score0.00765EPSS
Exploits0Affected Software1
Rows per page
Query Builder