{"id":"CVE-2020-4029","state":"PUBLISHED","title":"The /rest/project-templates/1.0/createshared resource in Atlassian Jira Server and Data Center before version 8.5.5, from 8.6.0 before 8.7.2, and from 8.8.0 before 8.8.1 allows rem","description":"The /rest/project-templates/1.0/createshared resource in Atlassian Jira Server and Data Center before version 8.5.5, from 8.6.0 before 8.7.2, and from 8.8.0 before 8.8.1 allows remote attackers to enumerate project names via an improper authorization vulnerability.","publishedAt":"2020-07-01T01:35:29.763Z","updatedAt":"2024-09-16T17:54:34.534Z","severity":null,"assigner":"atlassian","products":["Atlassian Jira Server and Data Center"],"affected":[{"vendor":"Atlassian","product":"Jira Server and Data Center","versions":[{"version":"unspecified","status":"affected","lessThan":"8.5.5","versionType":"custom"},{"version":"8.6.0","status":"affected","lessThan":"unspecified","versionType":"custom"},{"version":"unspecified","status":"affected","lessThan":"8.7.2","versionType":"custom"},{"version":"8.8.0","status":"affected","lessThan":"unspecified","versionType":"custom"},{"version":"unspecified","status":"affected","lessThan":"8.8.1","versionType":"custom"}]}],"references":["https://jira.atlassian.com/browse/JRASERVER-70926"],"weaknesses":[],"ingestedAt":"2026-10-29T19:47:32.441Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/4xxx/CVE-2020-4029.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-4029","state":"PUBLISHED","datePublished":"2020-07-01T01:35:29.763Z","dateUpdated":"2024-09-16T17:54:34.534Z","assignerShortName":"atlassian","assignerOrgId":"f08a6ab8-ed46-4c22-8884-d911ccfe3c66","dateReserved":"2019-12-30T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"The /rest/project-templates/1.0/createshared resource in Atlassian Jira Server and Data Center before version 8.5.5, from 8.6.0 before 8.7.2, and from 8.8.0 before 8.8.1 allows remote attackers to enumerate project names via an improper authorization vulnerability."}],"affected":[{"vendor":"Atlassian","product":"Jira Server and Data Center","versions":[{"version":"unspecified","status":"affected","lessThan":"8.5.5","versionType":"custom"},{"version":"8.6.0","status":"affected","lessThan":"unspecified","versionType":"custom"},{"version":"unspecified","status":"affected","lessThan":"8.7.2","versionType":"custom"},{"version":"8.8.0","status":"affected","lessThan":"unspecified","versionType":"custom"},{"version":"unspecified","status":"affected","lessThan":"8.8.1","versionType":"custom"}]}],"references":[{"url":"https://jira.atlassian.com/browse/JRASERVER-70926","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"Improper authorization","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"atlassian","dateUpdated":"2020-07-01T01:35:29.000Z","orgId":"f08a6ab8-ed46-4c22-8884-d911ccfe3c66"},"datePublic":"2020-07-01T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security@atlassian.com","DATE_PUBLIC":"2020-07-01T00:00:00","ID":"CVE-2020-4029","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Jira Server and Data Center","version":{"version_data":[{"version_affected":"<","version_value":"8.5.5"},{"version_affected":">=","version_value":"8.6.0"},{"version_affected":"<","version_value":"8.7.2"},{"version_affected":">=","version_value":"8.8.0"},{"version_affected":"<","version_value":"8.8.1"}]}}]},"vendor_name":"Atlassian"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The /rest/project-templates/1.0/createshared resource in Atlassian Jira Server and Data Center before version 8.5.5, from 8.6.0 before 8.7.2, and from 8.8.0 before 8.8.1 allows remote attackers to enumerate project names via an improper authorization vulnerability."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Improper authorization"}]}]},"references":{"reference_data":[{"name":"https://jira.atlassian.com/browse/JRASERVER-70926","refsource":"MISC","url":"https://jira.atlassian.com/browse/JRASERVER-70926"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://jira.atlassian.com/browse/JRASERVER-70926","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T07:52:20.799Z"}}]}}}