CVE-2020-14183: Infoleak
Affected versions of Jira Server & Data Center allow a remote attacker with limited (non-admin) privileges to view a Jira instance's Support Entitlement Number (SEN) via an Information Disclosure vulnerability in the HTTP Response headers. The affected versions are before version 7.13.18, from version 8.0.0 before 8.5.9, and from version 8.6.0 before 8.12.1.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-14183?
CVE-2020-14183 is an Information Disclosure vulnerability in Jira Server & Data Center that allows a remote attacker with limited privileges to view a Jira instance's Support Entitlement Number (SEN) through the HTTP Response headers.
Which versions of Jira Server & Data Center are affected by CVE-2020-14183?
Versions before 7.13.18, from 8.0.0 to 8.5.9, and from 8.6.0 to 8.12.1 of Jira Server & Data Center are affected by CVE-2020-14183.
What is the severity of CVE-2020-14183?
CVE-2020-14183 has a severity rating of 4.3 (medium).
How can a remote attacker exploit CVE-2020-14183?
A remote attacker with limited (non-admin) privileges can exploit CVE-2020-14183 to view a Jira instance's Support Entitlement Number (SEN) through the HTTP Response headers.
Is there a fix available for CVE-2020-14183?
Yes, updating to version 7.13.18 or later, version 8.5.9 or later, or version 8.12.1 or later of Jira Server & Data Center fixes CVE-2020-14183.