Skip to content
OpenAdvisories
Unscored CVE-2020-14192 EUVD-2020-6348GHSA-rqwp-hg2g-ffp2

Affected versions of Atlassian Fisheye and Crucible allow remote attackers to view a product's SEN via an Information Disclosure vulnerabil…

Published Feb 1, 2021 · Updated Sep 16, 2024 · Assigned by atlassian

Vendor: Atlassian Product: Crucible Product: Fisheye

Description

Affected versions of Atlassian Fisheye and Crucible allow remote attackers to view a product's SEN via an Information Disclosure vulnerability in the x-asen response header from Atlassian Analytics. The affected versions are before version 4.8.4.

Affected products

VendorProductAffectedFixed
Atlassian Fisheye unspecified – < 4.8.4 4.8.4
Atlassian Crucible unspecified – < 4.8.4 4.8.4

References