medium5.9
CVE-2020-14168
The email client in Jira Server and Data Center before version 7.13.16, from 8.5.0 before 8.5.7, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows re…
Impact
The email client in Jira Server and Data Center before version 7.13.16, from 8.5.0 before 8.5.7, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to access outgoing emails between a Jira instance and the SMTP server via man-in-the-middle (MITM) vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Jira | before 7.13.14 |
| Atlassian | Jira Data Center | from 8.5.0 before 8.5.5 from 8.8.0 before 8.8.2 from 8.9.0 before 8.9.1 |
| Atlassian | Jira Server | from 8.5.0 before 8.5.5 from 8.8.0 before 8.8.2 from 8.9.0 before 8.9.1 |
| Atlassian | Jira Software Data Center | before 7.13.14 |