CVE-2020-14178: High severity atlassian jira vulnerability
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate project keys via an Information Disclosure vulnerability in the /browse.PROJECTKEY endpoint. The affected versions are before version 7.13.7, from version 8.0.0 before 8.5.8, and from version 8.6.0 before 8.12.0.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-14178?
CVE-2020-14178 is an Information Disclosure vulnerability in Atlassian Jira Server and Data Center that allows remote attackers to enumerate project keys.
Which versions of Atlassian Jira Server and Data Center are affected?
Versions before 7.13.7 of Atlassian Jira Server and versions 8.0.0 to 8.5.8, and 8.6.0 to 8.12.0 of Atlassian Jira Data Center are affected.
How can remote attackers exploit this vulnerability?
Remote attackers can exploit this vulnerability by sending a request to the /browse.PROJECTKEY endpoint to enumerate project keys.
What is the severity rating of CVE-2020-14178?
The severity rating of CVE-2020-14178 is high, with a severity value of 7.5.
Is there a fix available for this vulnerability?
Yes, the fix for CVE-2020-14178 is available in versions 7.13.7, 8.5.8, and 8.12.0 of Atlassian Jira Server and Data Center.