CVE-2020-14167
First published: Wed Jul 01 2020(Updated: )
The MessageBundleResource resource in Jira Server and Data Center before version 7.13.4, from 8.5.0 before 8.5.5, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to impact the application's availability via an Denial of Service (DoS) vulnerability.
Credit: security@atlassian.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Atlassian JIRA | <7.13.14 | |
| Atlassian Jira Data Center | >=8.5.0<8.5.5 | |
| Atlassian Jira Data Center | >=8.8.0<8.8.2 | |
| Atlassian Jira Data Center | >=8.9.0<8.9.1 | |
| Atlassian Jira Server | >=8.5.0<8.5.5 | |
| Atlassian Jira Server | >=8.8.0<8.8.2 | |
| Atlassian Jira Server | >=8.9.0<8.9.1 | |
| Atlassian Jira Software Data Center | <7.13.14 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-14167?
CVE-2020-14167 is a Denial of Service (DoS) vulnerability in Jira Server and Data Center before version 7.13.4, 8.5.0 before 8.5.5, 8.8.0 before 8.8.2, and 8.9.0 before 8.9.1.
How does CVE-2020-14167 impact Jira Server and Data Center?
CVE-2020-14167 allows remote attackers to impact the availability of Jira Server and Data Center through a Denial of Service (DoS) attack.
What is the severity of CVE-2020-14167?
CVE-2020-14167 has a severity value of 7.5, which is considered high.
Which versions of Jira Server and Data Center are affected by CVE-2020-14167?
CVE-2020-14167 affects Jira Server and Data Center versions before 7.13.4, 8.5.0 before 8.5.5, 8.8.0 before 8.8.2, and 8.9.0 before 8.9.1.
How can I fix CVE-2020-14167 in Jira Server and Data Center?
To fix CVE-2020-14167, it is recommended to upgrade Jira Server and Data Center to version 7.13.4, 8.5.5, 8.8.2, or 8.9.1, depending on the affected version.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- agent/author
- agent/severity
- agent/tags
- agent/softwarecombine
- agent/description
- agent/first-publish-date
- agent/event
- vendor/atlassian
- canonical/atlassian jira
- canonical/atlassian jira data center
- version/atlassian jira data center/8.5.0
- version/atlassian jira data center/8.8.0
- version/atlassian jira data center/8.9.0
- canonical/atlassian jira server
- version/atlassian jira server/8.5.0
- version/atlassian jira server/8.8.0
- version/atlassian jira server/8.9.0
- canonical/atlassian jira software data center