CVE-2020-4029 - The /rest/project-templates/1.0/createshared resource in Atlassian Jira Server and Data Center before version 8.5.5, from 8.6.0 before 8.7.2, and from 8.8.0 before 8.8.1 allows remote attackers to enumerate project names via an improper authorization vulnerability

Back Back to CVE browser

MEDIUM

The /rest/project-templates/1.0/createshared resource in Atlassian Jira Server and Data Center before version 8.5.5, from 8.6.0 before 8.7.2, and from 8.8.0 before 8.8.1 allows remote attackers to enumerate project names via an improper authorization vulnerability

Published Jul 1, 2020

4.3

MEDIUM

CVSS 3.1

EPSS 1.45%

Description

The /rest/project-templates/1.0/createshared resource in Atlassian Jira Server and Data Center before version 8.5.5, from 8.6.0 before 8.7.2, and from 8.8.0 before 8.8.1 allows remote attackers to enumerate project names via an improper authorization vulnerability.

Affected products

Vendor Atlassian Product Jira Server and Data Center Default
n/a
- Version
  8.6.0
  Status
  affected
  Constraints
  <unspecified
- Version
  8.8.0
  Status
  affected
  Constraints
  <unspecified
- Version
  unspecified
  Status
  affected
  Constraints
  <8.5.5
- Version
  unspecified
  Status
  affected
  Constraints
  <8.7.2
- Version
  unspecified
  Status
  affected
  Constraints
  <8.8.1