PT-2020-13904

CVE-2020-14165

Published

2020-07-01

Updated

2021-07-21

CVSS 3.1

5.3

Medium

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Jira Server and Data Center versions prior to 8.9.0

Description The issue allows remote attackers to obtain information about custom project avatars names via an improper authorization.

Recommendations For versions prior to 8.9.0, update to version 8.9.0 or later to resolve the issue.

Exploitability

Fix

Vendors

Affected products

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾