CVE-2020-4028

Versions before 8.9.1, Various resources in Jira responded with a 404 instead of redirecting unauthenticated users to the login page, in some situations this…

published June 23, 2020

CVSS
—
EPSS
1%
Percentile
58.1
In the wild
Unconfirmed
What it is

Versions before 8.9.1, Various resources in Jira responded with a 404 instead of redirecting unauthenticated users to the login page, in some situations this may have allowed unauthorised attackers to determine if certain resources exist or not through an Information Disclosure vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00862 · 58.1th percentile
Published
2020-06-23T12:55Z
EPSS history
Timeline
  • 23 JUN 12:55Z
    Versions before 8.9.1, Various resources in Jira responded with a 404 instead of redirecting unauthenticated users to the login page, in some situations this…
    cvelistv5