2 lines
3.9 KiB
JSON
2 lines
3.9 KiB
JSON
{"affected":[{"affectedData":[{"product":"Jira Server and Data Center","vendor":"Atlassian","versions":[{"lessThan":"8.5.5","status":"affected","version":"unspecified","versionType":"custom"},{"lessThan":"unspecified","status":"affected","version":"8.6.0","versionType":"custom"},{"lessThan":"8.7.2","status":"affected","version":"unspecified","versionType":"custom"},{"lessThan":"unspecified","status":"affected","version":"8.8.0","versionType":"custom"},{"lessThan":"8.8.1","status":"affected","version":"unspecified","versionType":"custom"}]}],"source":"security@atlassian.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*","matchCriteriaId":"385624FB-6801-4B2D-A41D-4435AB2DC2F7","versionEndExcluding":"8.5.5","vulnerable":true},{"criteria":"cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*","matchCriteriaId":"53E4C23D-6911-4919-867A-9B0AB37DBDDF","versionEndExcluding":"8.7.2","versionStartIncluding":"8.6.0","vulnerable":true},{"criteria":"cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*","matchCriteriaId":"C7DF16FD-97C8-4918-B548-2904830E7729","versionEndExcluding":"8.8.1","versionStartIncluding":"8.8.0","vulnerable":true},{"criteria":"cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*","matchCriteriaId":"8261CDC7-3FD3-4B69-8B7F-725333B644B1","versionEndExcluding":"8.7.2","versionStartIncluding":"8.6.0","vulnerable":true},{"criteria":"cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*","matchCriteriaId":"5348E1DB-7336-46B8-83A3-51C986B0DF2D","versionEndExcluding":"8.8.1","versionStartIncluding":"8.8.0","vulnerable":true},{"criteria":"cpe:2.3:a:atlassian:jira_software_data_center:*:*:*:*:*:*:*:*","matchCriteriaId":"2CED0E35-40ED-4D46-8121-4F1AA9D23EAE","versionEndExcluding":"8.5.5","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"The /rest/project-templates/1.0/createshared resource in Atlassian Jira Server and Data Center before version 8.5.5, from 8.6.0 before 8.7.2, and from 8.8.0 before 8.8.1 allows remote attackers to enumerate project names via an improper authorization vulnerability."},{"lang":"es","value":"El recurso /rest/project-templates/1.0/createshared en Atlassian Jira Server y Data Center versiones anteriores a 8.5.5, desde versiones 8.6.0 anteriores a 8.7.2 y desde versiones 8.8.0 anteriores a 8.8.1, permite a atacantes remotos enumerar nombres de proyectos por medio de una vulnerabilidad de autorización inapropiada"}],"id":"CVE-2020-4029","lastModified":"2026-06-17T03:19:27.017","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"NONE","baseScore":4.0,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":8.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-07-01T02:15:12.413","references":[{"source":"security@atlassian.com","tags":["Vendor Advisory"],"url":"https://jira.atlassian.com/browse/JRASERVER-70926"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://jira.atlassian.com/browse/JRASERVER-70926"}],"sourceIdentifier":"security@atlassian.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|