CVE-2020-4028 | BDVDB-2026-137883 Detail

AtlassianJira Server and Data Center

Description#

Versions before 8.9.1, Various resources in Jira responded with a 404 instead of redirecting unauthenticated users to the login page, in some situations this may have allowed unauthorised attackers to determine if certain resources exist or not through an Information Disclosure vulnerability.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://jira.atlassian.com/browse/JRASERVER-71175

Exploit#

No public exploit known

History#

Version 12020-06-23Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.