Lucene search
AtlassianCVELIST:CVE-2020-36289HistoryMay 12, 2021 - 12:00 a.m.
CVE-2020-36289
2021-05-1200:00:00
atlassian
www.cve.org
Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the QueryComponentRendererValue!Default.jspa endpoint. The affected versions are before version 8.5.13, from version 8.6.0 before 8.13.5, and from version 8.14.0 before 8.15.1.
CNA Affected
[
{
"product": "Jira Server",
"vendor": "Atlassian",
"versions": [
{
"lessThan": "8.5.13",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "unspecified",
"status": "affected",
"version": "8.6.0",
"versionType": "custom"
},
{
"lessThan": "8.13.5",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "unspecified",
"status": "affected",
"version": "8.14.0",
"versionType": "custom"
},
{
"lessThan": "8.15.1",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "Jira Data Center",
"vendor": "Atlassian",
"versions": [
{
"lessThan": "8.5.13",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "unspecified",
"status": "affected",
"version": "8.6.0",
"versionType": "custom"
},
{
"lessThan": "8.13.5",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "unspecified",
"status": "affected",
"version": "8.14.0",
"versionType": "custom"
},
{
"lessThan": "8.15.1",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
nessus
nessus
Atlassian Jira 8.6.x < 8.13.7 Multiple Vulnerabilities
2021-07-02 00:00:00
Atlassian Jira 8.14.x < 8.17.0 Multiple Vulnerabilities
2021-07-02 00:00:00
prion
prion
Information disclosure
2021-05-12 04:15:00
atlassian
atlassian
nuclei
nuclei
Jira Server and Data Center - Information Disclosure
2021-06-09 15:43:52
cve
cve
CVE-2020-36289
2021-05-12 04:15:07
nvd
nvd
CVE-2020-36289
2021-05-12 04:15:07
seebug
seebug
Atlassian Jira 信息泄露漏洞（CVE-2020-36289）
2021-06-10 00:00:00