[%22Third] Security misconfiguration in the /json/fe/activeUserFinder.do resource - CVE-2020-4015 - Create and track feature requests for Atlassian products.

Type: Bug
Resolution: Fixed
Priority: Low
Fix Version/s: 4.8.1
Affects Version/s: 4.8.0
Component/s: User management
Labels:

Symptom Severity:
Severity 3 - Minor
Bug Fix Policy:
View Atlassian Server bug fix policy

The /json/fe/activeUserFinder.do resource in Altassian Fisheye and Crucible before version 4.8.1 allows remote attackers to view user user email addresses via a security misconfiguration.

relates to

FE-7284 Security misconfiguration in the /json/fe/activeUserFinder.do resource - CVE-2020-4015

Closed

No work has yet been logged on this issue.

Assignee:: Unassigned

Reporter:: Security Metrics Bot

Affected customers:: 0 This affects my team

Watchers:: 0 Start watching this issue

Created:: 16/Apr/2020 7:26 PM

Updated:: 09/Nov/2023 9:44 AM

Resolved:: 17/Apr/2020 2:40 AM

Details

Description

Attachments

Issue Links

Forms

Activity

[CRUC-8468] Security misconfiguration in the /json/fe/activeUserFinder.do resource - CVE-2020-4015

People

Dates