CVE-2020-14168: Atlassian Jira Server and Data Center

Описание

Оригинално описание

The email client in Jira Server and Data Center before version 7.13.16, from 8.5.0 before 8.5.7, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to access outgoing emails between a Jira instance and the SMTP server via man-in-the-middle (MITM) vulnerability.

Засегнати продукти

• Atlassian Jira Server and Data Center: unspecified преди 7.13.16; 8.5.0 преди unspecified; unspecified преди 8.5.7; 8.8.0 преди unspecified; unspecified преди 8.8.2; 8.9.0 преди unspecified; unspecified преди 8.9.1

История

Други уязвимости в Atlassian Jira Server and Data Center

• CVE-2020-4029
• CVE-2020-4024
• CVE-2020-4025
• CVE-2020-4022
• CVE-2020-14169

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2020-14168
• https://nvd.nist.gov/vuln/detail/CVE-2020-14168
• https://jira.atlassian.com/browse/JRASERVER-71198