Uploaded image for project: 'Crucible'
  1. Crucible
  2. CRUC-8485

The bundled version of Atlassian Navigator Links contained an incorrect authorization check - CVE-2020-4026

XMLWordPrintable

      The bundled version of Atlassian Navigator Links plugin in Atlassian Fisheye before version 4.8.2 allows remote attackers to enumerate all linked applications, including those that are restricted or otherwise hidden, through an incorrect authorization check. Additional details about the issue in the Atlassian Navigator Links plugin can be found below.

      The CustomAppsRestResource list resource in Atlassian Navigator Links before version 3.3.23, from version 4.0.0 before version 4.3.7, from version 5.0.0 before 5.0.1, and from version 5.1.0 before 5.1.1 allows remote attackers to enumerate all linked applications, including those that are restricted or otherwise hidden, through an incorrect authorization check.

            [CRUC-8485] The bundled version of Atlassian Navigator Links contained an incorrect authorization check - CVE-2020-4026

            No work has yet been logged on this issue.

              Unassigned Unassigned
              security-metrics-bot Security Metrics Bot
              Affected customers:
              0 This affects my team
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: