CVE-2020-4028
CVE-2020-4028
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
23 Jun 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Versions before 8.9.1, Various resources in Jira responded with a 404 instead of redirecting unauthenticated users to the login page, in some situations this may have allowed unauthorised attackers to determine if certain resources exist or not through an Information Disclosure vulnerability.
Affected products
Atlassian · Jira Server and Data CenterWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →