CVE-2020-14185

Affected versions of Jira Server allow remote unauthenticated attackers to enumerate issue keys via a missing permissions check in the ActionsAndOperations…

published October 15, 2020

CVSS
—
EPSS
2%
Percentile
79.4
In the wild
Unconfirmed
What it is

Affected versions of Jira Server allow remote unauthenticated attackers to enumerate issue keys via a missing permissions check in the ActionsAndOperations resource. The affected versions are before 7.13.18, from version 8.0.0 before 8.5.9, and from version 8.6.0 before version 8.12.2.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01889 · 79.4th percentile
Published
2020-10-15T21:25Z
EPSS history
Timeline
  • 15 OCT 21:25Z
    Affected versions of Jira Server allow remote unauthenticated attackers to enumerate issue keys via a missing permissions check in the ActionsAndOperations…
    cvelistv5