VULNERABILITY INTELLIGENCE

CVE-2020-4028

CVSS score5.3 MEDIUM
EPSS probability0.86%
CISA KEVNot currently listed
Published2020-06-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

Versions before 8.9.1, Various resources in Jira responded with a 404 instead of redirecting unauthenticated users to the login page, in some situations this may have allowed unauthorised attackers to determine if certain resources exist or not through an Information Disclosure vulnerability.

Weakness classification

  • CWE-203: Observable Discrepancy

Primary references