CVE-2020-14192

Name of the Vulnerable Software and Affected Versions Atlassian Fisheye and Crucible versions prior to 4.8.4

Description The issue allows remote attackers to view a product's SEN via an Information Disclosure vulnerability in the x-asen response header from Atlassian Analytics. This vulnerability is related to the disclosure of protected information and can be exploited by a remote attacker to reveal sensitive information.

Recommendations For versions prior to 4.8.4, update to version 4.8.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the x-asen response header from Atlassian Analytics to minimize the risk of exploitation.