Information Disclosure in Atlassian Fisheye and Crucible Plugin

CVE-2020-4016

Summary

The crucible-jira-ril plugin in Atlassian Fisheye and Crucible prior to version 4.8.1 has a vulnerability that allows remote attackers to gain access to sensitive information. By exploiting this vulnerability, attackers may obtain the IDs of configured Jira application links, potentially leading to unauthorized access or further attacks on linked applications. It is crucial for users of affected versions to update their installations to safeguard sensitive data.

References