CVE-2020-14165 — Atlassian / Jira Server and Data Center

CVE-2020-14165

Atlassian / Jira Server and Data Center PUBLISHED

Description (CNA)

The UniversalAvatarResource.getAvatars resource in Jira Server and Data Center before version 8.9.0 allows remote attackers to obtain information about custom project avatars names via an Improper authorization vulnerability.

Affected (CNA)

Vendor / product	Versions
Atlassian / Jira Server and Data Center	affected unspecified before 8.9.0

CWE

No CWE identifiers supplied.

References

https://jira.atlassian.com/browse/JRASERVER-71185

ADP enrichment

CVE

No English description supplied.

https://jira.atlassian.com/browse/JRASERVER-71185