CVE-2020-14168
Summary
| CVE | CVE-2020-14168 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-07-01 02:15:00 UTC |
| Updated | 2022-03-30 13:17:00 UTC |
| Description | The email client in Jira Server and Data Center before version 7.13.16, from 8.5.0 before 8.5.7, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to access outgoing emails between a Jira instance and the SMTP server via man-in-the-middle (MITM) vulnerability. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Atlassian | Jira | All | All | All | All |
| Application | Atlassian | Jira | All | All | All | All |
| Application | Atlassian | Jira Data Center | All | All | All | All |
| Application | Atlassian | Jira Server | All | All | All | All |
| Application | Atlassian | Jira Software Data Center | All | All | All | All |
| Application | Atlassian | Jira Software Data Center | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| [JRASERVER-71198] Man-in-the-middle in Jira email client - CVE-2020-14168 - Create and track feature requests for Atlassian products. | MISC | jira.atlassian.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 150380 Atlassian Jira Server Man In The Middle (CVE-2020-14168)