[%22Vendor] Improper authorization vulnerablity in the /profile/deleteWatch.do resource- CVE-2020-4014 - Create and track feature requests for Atlassian products.

Type: Bug
Resolution: Fixed
Priority: Low
Fix Version/s: 4.8.1
Affects Version/s: 4.8.0
Component/s: Repositories
Labels:

Symptom Severity:
Severity 3 - Minor
Bug Fix Policy:
View Atlassian Server bug fix policy

The /profile/deleteWatch.do resource in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to remove another user's watching settings for a repository via an improper authorization vulnerability.

is related to

CRUC-8467 Improper authorization vulnerablity in the /profile/deleteWatch.do resource- CVE-2020-4014

Closed

Assignee:: Unassigned

Reporter:: Security Metrics Bot

Affected customers:: 0 This affects my team

Watchers:: 0 Start watching this issue

Created:: 16/Apr/2020 6:55 PM

Updated:: 09/Nov/2023 9:45 AM

Resolved:: 17/Apr/2020 2:30 AM

Details

Description

Attachments

Issue Links

Forms

Activity

People

Dates