Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
4.3
CVE-2020-14192: Affected versions of Atlassian Fisheye and Crucible allow remote attackers to view a product's SEN via an Information Disclosure vulnerability in the x-asen response header from Atlassian Analytics...
CVE-2020-14192 · published 5 years ago
Summary
Affected versions of Atlassian Fisheye and Crucible allow remote attackers to view a product's SEN via an Information Disclosure vulnerability in the x-asen response header from Atlassian Analytics. The affected versions are before version 4.8.4.
What to do
- Update atlassian crucible to version 4.8.4 or later.
- Update atlassian fisheye to version 4.8.4 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| atlassian | crucible |
< 4.8.4 cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:* |
| atlassian | fisheye |
< 4.8.4 cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:* |
Original advisory text
Affected versions of Atlassian Fisheye and Crucible allow remote attackers to view a product's SEN via an Information Disclosure vulnerability in the x-asen response header from Atlassian Analytics...
Affected versions of Atlassian Fisheye and Crucible allow remote attackers to view a product's SEN via an Information Disclosure vulnerability in the x-asen response header from Atlassian Analytics. The affected versions are before version 4.8.4.
References
- https://jira.atlassian.com/browse/CRUC-8502 Issue Tracking Vendor Advisory
- https://jira.atlassian.com/browse/FE-7334 Issue Tracking Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-200Information Exposure
Timeline
Published2 Feb 2021
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2020-14192 · NVD
Track software like this
Free during beta