• Type: Bug
• Resolution: Fixed
• Priority: Low
• Fix Version/s: 4.8.1
• Affects Version/s: 4.8.0
• Component/s: Server administration
• Labels:

  • advisory
  • advisory-released
  • cve-2020-4017
  • cvss-medium
  • information-disclosure
  • release-48x
  • security

[CRUC-8470] Information disclosure in the /rest/jira-ril/1.0/jira-rest/applinks resource in the crucible-jira-ril plugin - CVE-2020-4017

Collapse comment: Security Metrics Bot added a comment - 16/Apr/2020 7:46 PM

Security Metrics Bot added a comment - 16/Apr/2020 7:46 PM

This is an independent assessment and you should evaluate its applicability to your own IT environment.
CVSS v3 score: 5.3 => Medium severity

Exploitability Metrics

Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None

Scope Metric

Scope	Unchanged

Impact Metrics

Confidentiality	Low
Integrity	None
Availability	None

https://asecurityteam.bitbucket.io/cvss_v3/#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Expand comment: Security Metrics Bot added a comment - 16/Apr/2020 7:46 PM

Security Metrics Bot added a comment - 16/Apr/2020 7:46 PM This is an independent assessment and you should evaluate its applicability to your own IT environment. CVSS v3 score: 5.3 => Medium severity Exploitability Metrics Attack Vector Network Attack Complexity Low Privileges Required None User Interaction None Scope Metric Scope Unchanged Impact Metrics Confidentiality Low Integrity None Availability None https://asecurityteam.bitbucket.io/cvss_v3/#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N