« Volver al listado

CVE-2020-14183

Estado: ModificadaMedia (4.3)—

Affected versions of Jira Server & Data Center allow a remote attacker with limited (non-admin) privileges to view a Jira instance's Support Entitlement Number (SEN) via an Information Disclosure vulnerability in the HTTP Response headers. The affected versions are before version 7.13.18, from version 8.0.0 before 8.5.9, and from version 8.6.0 before 8.12.1.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Atlassian — Jira

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-14183",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@atlassian.com",
      "affectedData": [
        {
          "vendor": "Atlassian",
          "product": "Jira Server",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "7.13.18",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "8.0.0",
              "lessThan": "unspecified",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "8.5.9",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "8.6.0",
              "lessThan": "unspecified",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "8.12.1",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-10-06T23:15:12.040",
  "references": [
    {
      "url": "https://jira.atlassian.com/browse/JRASERVER-71646",
      "tags": [
        "Permissions Required",
        "Vendor Advisory"
      ],
      "source": "security@atlassian.com"
    },
    {
      "url": "https://jira.atlassian.com/browse/JRASERVER-71646",
      "tags": [
        "Permissions Required",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Affected versions of Jira Server & Data Center allow a remote attacker with limited (non-admin) privileges to view a Jira instance's Support Entitlement Number (SEN) via an Information Disclosure vulnerability in the HTTP Response headers. The affected versions are before version 7.13.18, from version 8.0.0 before 8.5.9, and from version 8.6.0 before 8.12.1."
    },
    {
      "lang": "es",
      "value": "Las versiones afectadas de Jira Server & Data Center, permiten a un atacante remoto con privilegios limitados (no de administrador) visualizar el Support Entitlement Number (SEN) de una instancia de Jira por medio de una vulnerabilidad de divulgación de información en los encabezados HTTP Response. Las versiones afectadas son anteriores a la versión 7.13.18, desde versión 8.0.0 anteriores a 8.5.9 y desde versión 8.6.0 anteriores a 8.12.1"
    }
  ],
  "lastModified": "2026-06-17T02:54:21.213",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:atlassian:jira:*:*:*:*:data_center:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C4E14497-BE54-41E5-BE0C-C9CB84D2A2C9",
              "versionEndExcluding": "7.13.18"
            },
            {
              "criteria": "cpe:2.3:a:atlassian:jira:*:*:*:*:server:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E43F04A4-FFD8-4EF0-A64B-67A7390FBE9B",
              "versionEndExcluding": "7.13.18"
            },
            {
              "criteria": "cpe:2.3:a:atlassian:jira:*:*:*:*:data_center:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "747BDDBB-A75C-48C7-A907-3514EA0AE9ED",
              "versionEndExcluding": "8.5.9",
              "versionStartIncluding": "8.0.0"
            },
            {
              "criteria": "cpe:2.3:a:atlassian:jira:*:*:*:*:server:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C5C7FD5B-E968-4162-AAE6-872577B08A25",
              "versionEndExcluding": "8.5.9",
              "versionStartIncluding": "8.0.0"
            },
            {
              "criteria": "cpe:2.3:a:atlassian:jira:*:*:*:*:data_center:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C55C6477-FB8F-4B94-85C4-EE765B0FBC54",
              "versionEndExcluding": "8.12.1",
              "versionStartIncluding": "8.6.0"
            },
            {
              "criteria": "cpe:2.3:a:atlassian:jira:*:*:*:*:server:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B53EB7A4-2303-4F3C-A6C1-58E4DC85BEB2",
              "versionEndExcluding": "8.12.1",
              "versionStartIncluding": "8.6.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@atlassian.com"
}