Vulnerabilities > CVE-2020-36231 - Authorization Bypass Through User-Controlled Key vulnerability in Atlassian products

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
network
low complexity
atlassian
CWE-639
NVD
Published: 2021-02-02
Updated: 2022-03-30

Summary

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view the metadata of boards they should not have access to via an Insecure Direct Object References (IDOR) vulnerability. The affected versions are before version 8.5.10, and from version 8.6.0 before 8.13.2.

Vulnerable Configurations

Part Description Count
Application
Atlassian
741

Common Weakness Enumeration (CWE)

References