Description

An information disclosure vulnerability in Jira allows an unauthenticated user to enumerate users via /ViewUserHover.jspa endpoint.

Remediation

Upgrade to the latest version of Jira

References

User Enumeration via /ViewUserHover.jspa

Related Vulnerabilities

WordPress Plugin AI ChatBot Information Disclosure (4.8.9)

Joe Editor DEADJOE file

Stack Trace Disclosure (NodeJS)

WordPress Plugin Social Network Tabs Information Disclosure (1.7.1)

Phpfastcache phpinfo publicly accessible (CVE-2021-37704)

Severity

Medium

Classification

CVE-2020-14181 CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Information Disclosure