CVE-2020-4029

CVE-2020-4029 – Atlassian Jira Server/Data Center suffers an improper authorization flaw in the REST endpoint /rest/project-templates/1.0/createshared that lets remote attackers enumerate project names. Affected versions are Jira Server/Data Center before 8.5.5; Jira 8.6.0 to 8.7.2; and Jira 8.8....

Improper authorization on /rest/project-templates/1.0/createshared endpoint - CVE-2020-4029

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate project names via an improper authorization vulnerability in the /rest/project-templates/1.0/createshared endpoint API endpoint. Affected versions: version 8.5.5 8.6.0 ≤ version 8.7.2 8.8.0 ≤ version...

Improper authorization on /rest/project-templates/1.0/createshared endpoint - CVE-2020-4029

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate project names via an improper authorization vulnerability in the /rest/project-templates/1.0/createshared endpoint API endpoint. Affected versions: version 8.5.5 8.6.0 ≤ version 8.7.2 8.8.0 ≤ version...