CVE-2020-36289
Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the QueryComponentRendererValue!Default.jspa endpoint. The affected versions are before version 8.5.13, from version 8.6.0 before 8.13.5, and from version 8.14.0 before 8.15.1.
| Software | From | Fixed in |
|---|---|---|
| atlassian / data_center | - | 8.5.13 |
| atlassian / jira | - | 8.5.13 |
| atlassian / jira_server | 8.6.0 | 8.13.5 |
| atlassian / jira_server | 8.14.0 | 8.15.1 |
| atlassian / jira_data_center | 8.6.0 | 8.13.5 |
| atlassian / jira_data_center | 8.14.0 | 8.15.1 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime