mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-29 05:56:59 +00:00
80 lines
2.9 KiB
JSON
80 lines
2.9 KiB
JSON
{
|
|
"CVE_data_meta": {
|
|
"ASSIGNER": "security@atlassian.com",
|
|
"DATE_PUBLIC": "2020-07-01T00:00:00",
|
|
"ID": "CVE-2020-4029",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "Jira Server and Data Center",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_value": "8.5.5",
|
|
"version_affected": "<"
|
|
},
|
|
{
|
|
"version_value": "8.6.0",
|
|
"version_affected": ">="
|
|
},
|
|
{
|
|
"version_value": "8.7.2",
|
|
"version_affected": "<"
|
|
},
|
|
{
|
|
"version_value": "8.8.0",
|
|
"version_affected": ">="
|
|
},
|
|
{
|
|
"version_value": "8.8.1",
|
|
"version_affected": "<"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"vendor_name": "Atlassian"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"data_format": "MITRE",
|
|
"data_type": "CVE",
|
|
"data_version": "4.0",
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "The /rest/project-templates/1.0/createshared resource in Atlassian Jira Server and Data Center before version 8.5.5, from 8.6.0 before 8.7.2, and from 8.8.0 before 8.8.1 allows remote attackers to enumerate project names via an improper authorization vulnerability."
|
|
}
|
|
]
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "Improper authorization"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"url": "https://jira.atlassian.com/browse/JRASERVER-70926",
|
|
"refsource": "MISC",
|
|
"name": "https://jira.atlassian.com/browse/JRASERVER-70926"
|
|
}
|
|
]
|
|
}
|
|
} |