CVE-2020-14168

CWE-200 — Information Exposure3 documents3 sources
Severity
5.9MEDIUM
EPSS
0.3%
top 44.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Atlassian Jira Server AND Data CenterAtlassian JiraAtlassian Jira Data Center+2 more
Timeline
PublishedJul 1
Latest updateMay 24

Description

The email client in Jira Server and Data Center before version 7.13.16, from 8.5.0 before 8.5.7, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to access outgoing emails between a Jira instance and the SMTP server via man-in-the-middle (MITM) vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 2.2 | Impact: 3.6

Affected Packages5 packages

▶CVEListV5atlassian/jira_server_and_data_centerunspecified — 7.13.16+6
▶NVDatlassian/jira_server8.5.0 — 8.5.5+2
▶NVDatlassian/jira_data_center8.5.0 — 8.5.5+2
▶NVDatlassian/jira< 7.13.14

🔴Vulnerability Details

2
GHSA
GHSA-h4rj-8m5x-jcrg: The email client in Jira Server and Data Center before version 7↗2022-05-24
▶
CVEList
CVE-2020-14168: The email client in Jira Server and Data Center before version 7↗2020-07-01
▶