medium4.3
CVE-2020-4015
The /json/fe/activeUserFinder.do resource in Altassian Fisheye and Crucible before version 4.8.1 allows remote attackers to view user user email addresses via …
Impact
The /json/fe/activeUserFinder.do resource in Altassian Fisheye and Crucible before version 4.8.1 allows remote attackers to view user user email addresses via a information disclosure vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Crucible | before 4.8.1 |
| Atlassian | Fisheye | before 4.8.1 |