IDOR Disclosure of Private Project Titles - CVE-2020-14174

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view titles of a private project via an Insecure Direct Object References (IDOR) vulnerability in the Administration Permission Helper.

Affected versions:

• version < 7.13.16
• 8.0.0 ≤ version < 8.5.7
• 8.6.0 ≤ version < 8.9.2
• 8.10.0 ≤ version < 8.10.1

Fixed versions:

• 7.13.16
• 8.5.7
• 8.9.2
• 8.10.1
• 8.11.0