medium4.3
CVE-2020-4029
The /rest/project-templates/1.0/createshared resource in Atlassian Jira Server and Data Center before version 8.5.5, from 8.6.0 before 8.7.2, and from 8.8.0 be…
Impact
The /rest/project-templates/1.0/createshared resource in Atlassian Jira Server and Data Center before version 8.5.5, from 8.6.0 before 8.7.2, and from 8.8.0 before 8.8.1 allows remote attackers to enumerate project names via an improper authorization vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Jira | before 8.5.5 |
| Atlassian | Jira Data Center | from 8.6.0 before 8.7.2 from 8.8.0 before 8.8.1 |
| Atlassian | Jira Server | from 8.6.0 before 8.7.2 from 8.8.0 before 8.8.1 |
| Atlassian | Jira Software Data Center | before 8.5.5 |