CVE-2020-14183

Description

Affected versions of Jira Server & Data Center allow a remote attacker with limited (non-admin) privileges to view a Jira instances Support Entitlement Number (SEN) via an Information Disclosure vulnerability in the HTTP Response headers. The affected versions are before version 7.13.18, from version 8.0.0 before 8.5.9, and from version 8.6.0 before 8.12.1.

Risk Information

Base Score

4.3

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS Score

Exploitation Probability

0.312

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2019-20100,CVE-2020-14183 are affected in Atlassian Jira 7.13.17	Windows
Vulnerabilities CVE-2020-14183 are affected in Atlassian Jira 8.12.0	Windows
Vulnerabilities CVE-2020-14183,CVE-2020-14185 are affected in Atlassian Jira 8.5.8	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234