Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view titles of a private project via an Insecure Direct Object References (IDOR) vulnerability in the Administration Permission Helper. The affected versions are before version 7.13.6, from version 8.0.0 before 8.5.7, from version 8.6.0 before 8.9.2, and from version 8.10.0 before 8.10.1.

Remediation

References

CVE-2020-14174

Related Vulnerabilities

Contao Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-10993)

WordPress Plugin WP Customer Area Cross-Site Request Forgery (8.1.3)

WordPress Plugin Catch Under Construction Security Bypass (1.3.4)

Opencart Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2023-40834)

Apache Tomcat CVE-2020-0822 Vulnerability (CVE-2020-0822)

Severity

Medium

Classification

CVE-2020-14174 CWE-639

Tags

Missing Update Known Vulnerabilities