What is CVE-2020-14183?

CVE-2020-14183 is a medium-severity vulnerability in Atlassian Jira, classified under Information Disclosure. CVSS score: 4.3/10. Published 2020-10-06.

How severe is CVE-2020-14183?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Information disclosure in Atlassian Jira

CVE-2020-14183

Affected versions of Jira Server & Data Center allow a remote attacker with limited (non-admin) privileges to view a Jira instance's Support Entitlement Number (SEN) via an Information Disclosure vulnerability in the HTTP Response headers. The affected versions are before version 7.13.18, from version 8.0.0 before 8.5.9, and from version 8.6.0 before 8.12.1.

Vulnerability class: Information Disclosure

EPSS: 0.013 (67.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Atlassian Jira
Atlassian Jira Server — versions unspecified, 8.0.0, 8.6.0

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

security@atlassian.com (Permissions Required, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-14183?: CVE-2020-14183 is a medium-severity vulnerability in Atlassian Jira, classified under Information Disclosure. CVSS score: 4.3/10. Published 2020-10-06.
How severe is CVE-2020-14183?: Medium severity. CVSS v3 base score is 4.3 out of 10.