atlassian data-center CVE-2020-36287 vulnerability in Atlassian Products
Published on April 9, 2021

product logo product logo
The dashboard gadgets preference resource of the Atlassian gadgets plugin used in Jira Server and Jira Data Center before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to obtain gadget related settings via a missing permissions check.

NVD

Weakness Type

What is an AuthZ Vulnerability?

The software performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

CVE-2020-36287 has been classified to as an AuthZ vulnerability or weakness.


Products Associated with CVE-2020-36287

stack.watch emails you whenever new vulnerabilities are published in Atlassian Data Center or Atlassian Jira. Just hit a watch button to start following.

 
 

Affected Versions

Atlassian Jira Server: Atlassian Jira Data Center:

Exploit Probability

EPSS
69.28%
Percentile
98.61%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.