vulnerability
Atlassian JIRA: Information Exposure (CVE-2020-14168)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:P/I:N/A:N) | Jul 1, 2020 | Jul 10, 2020 | Jul 10, 2020 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:P/I:N/A:N)
Published
Jul 1, 2020
Added
Jul 10, 2020
Modified
Jul 10, 2020
Description
The email client in Jira Server and Data Center before version 7.13.16, from 8.5.0 before 8.5.7, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to access outgoing emails between a Jira instance and the SMTP server via man-in-the-middle (MITM) vulnerability.
Solutions
atlassian-jira-upgrade-7_13_16atlassian-jira-upgrade-8_5_7atlassian-jira-upgrade-8_8_2atlassian-jira-upgrade-8_9_1
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.