CVE-2020-36238CWE-863

The /rest/api/1.0/render resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0…

published April 1, 2021

CVSS
—
EPSS
2%
Percentile
75.5
In the wild
Unconfirmed
What it is

The /rest/api/1.0/render resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to determine if a username is valid or not via a missing permissions check.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01591 · 75.5th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2021-04-01T02:30Z
EPSS history
Timeline
  • 01 APR 02:30Z
    The /rest/api/1.0/render resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0…
    cvelistv5