Vulnerability Details CVE-2020-14171
Atlassian Bitbucket Server from version 4.9.0 before version 7.2.4 allows remote attackers to intercept unencrypted repository import requests via a Man-in-the-Middle (MITM) attack.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 51.6%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 5.8
Products affected by CVE-2020-14171
-
cpe:2.3:a:atlassian:bitbucket:4.10.0
-
cpe:2.3:a:atlassian:bitbucket:4.10.1
-
cpe:2.3:a:atlassian:bitbucket:4.10.2
-
cpe:2.3:a:atlassian:bitbucket:4.11.0
-
cpe:2.3:a:atlassian:bitbucket:4.11.1
-
cpe:2.3:a:atlassian:bitbucket:4.11.2
-
cpe:2.3:a:atlassian:bitbucket:4.12.0
-
cpe:2.3:a:atlassian:bitbucket:4.12.1
-
cpe:2.3:a:atlassian:bitbucket:4.13.0
-
cpe:2.3:a:atlassian:bitbucket:4.13.1
-
cpe:2.3:a:atlassian:bitbucket:4.14.0
-
cpe:2.3:a:atlassian:bitbucket:4.14.1
-
cpe:2.3:a:atlassian:bitbucket:4.14.10
-
cpe:2.3:a:atlassian:bitbucket:4.14.11
-
cpe:2.3:a:atlassian:bitbucket:4.14.12
-
cpe:2.3:a:atlassian:bitbucket:4.14.2
-
cpe:2.3:a:atlassian:bitbucket:4.14.3
-
cpe:2.3:a:atlassian:bitbucket:4.14.4
-
cpe:2.3:a:atlassian:bitbucket:4.14.5
-
cpe:2.3:a:atlassian:bitbucket:4.14.6
-
cpe:2.3:a:atlassian:bitbucket:4.14.7
-
cpe:2.3:a:atlassian:bitbucket:4.14.8
-
cpe:2.3:a:atlassian:bitbucket:4.14.9
-
cpe:2.3:a:atlassian:bitbucket:4.9.0
-
cpe:2.3:a:atlassian:bitbucket:4.9.1
-
cpe:2.3:a:atlassian:bitbucket:5.0.0
-
cpe:2.3:a:atlassian:bitbucket:5.0.1
-
cpe:2.3:a:atlassian:bitbucket:5.0.10
-
cpe:2.3:a:atlassian:bitbucket:5.0.2
-
cpe:2.3:a:atlassian:bitbucket:5.0.3
-
cpe:2.3:a:atlassian:bitbucket:5.0.4
-
cpe:2.3:a:atlassian:bitbucket:5.0.5
-
cpe:2.3:a:atlassian:bitbucket:5.0.6
-
cpe:2.3:a:atlassian:bitbucket:5.0.7
-
cpe:2.3:a:atlassian:bitbucket:5.0.8
-
cpe:2.3:a:atlassian:bitbucket:5.0.9
-
cpe:2.3:a:atlassian:bitbucket:5.1.0
-
cpe:2.3:a:atlassian:bitbucket:5.1.1
-
cpe:2.3:a:atlassian:bitbucket:5.1.2
-
cpe:2.3:a:atlassian:bitbucket:5.1.3
-
cpe:2.3:a:atlassian:bitbucket:5.1.4
-
cpe:2.3:a:atlassian:bitbucket:5.1.5
-
cpe:2.3:a:atlassian:bitbucket:5.1.6
-
cpe:2.3:a:atlassian:bitbucket:5.1.7
-
cpe:2.3:a:atlassian:bitbucket:5.1.8
-
cpe:2.3:a:atlassian:bitbucket:5.1.9
-
cpe:2.3:a:atlassian:bitbucket:5.10.0
-
cpe:2.3:a:atlassian:bitbucket:5.10.1
-
cpe:2.3:a:atlassian:bitbucket:5.10.2
-
cpe:2.3:a:atlassian:bitbucket:5.10.3
-
cpe:2.3:a:atlassian:bitbucket:5.11.0
-
cpe:2.3:a:atlassian:bitbucket:5.11.1
-
cpe:2.3:a:atlassian:bitbucket:5.11.2
-
cpe:2.3:a:atlassian:bitbucket:5.11.3
-
cpe:2.3:a:atlassian:bitbucket:5.12.0
-
cpe:2.3:a:atlassian:bitbucket:5.12.1
-
cpe:2.3:a:atlassian:bitbucket:5.12.2
-
cpe:2.3:a:atlassian:bitbucket:5.12.3
-
cpe:2.3:a:atlassian:bitbucket:5.13.0
-
cpe:2.3:a:atlassian:bitbucket:5.13.1
-
cpe:2.3:a:atlassian:bitbucket:5.13.2
-
cpe:2.3:a:atlassian:bitbucket:5.13.3
-
cpe:2.3:a:atlassian:bitbucket:5.13.4
-
cpe:2.3:a:atlassian:bitbucket:5.13.5
-
cpe:2.3:a:atlassian:bitbucket:5.13.6
-
cpe:2.3:a:atlassian:bitbucket:5.14.0
-
cpe:2.3:a:atlassian:bitbucket:5.14.1
-
cpe:2.3:a:atlassian:bitbucket:5.14.2
-
cpe:2.3:a:atlassian:bitbucket:5.14.3
-
cpe:2.3:a:atlassian:bitbucket:5.14.4
-
cpe:2.3:a:atlassian:bitbucket:5.15.0
-
cpe:2.3:a:atlassian:bitbucket:5.15.1
-
cpe:2.3:a:atlassian:bitbucket:5.15.2
-
cpe:2.3:a:atlassian:bitbucket:5.15.3
-
cpe:2.3:a:atlassian:bitbucket:5.16.0
-
cpe:2.3:a:atlassian:bitbucket:5.16.1
-
cpe:2.3:a:atlassian:bitbucket:5.16.10
-
cpe:2.3:a:atlassian:bitbucket:5.16.2
-
cpe:2.3:a:atlassian:bitbucket:5.16.3
-
cpe:2.3:a:atlassian:bitbucket:5.16.4
-
cpe:2.3:a:atlassian:bitbucket:5.16.5
-
cpe:2.3:a:atlassian:bitbucket:5.16.6
-
cpe:2.3:a:atlassian:bitbucket:5.16.7
-
cpe:2.3:a:atlassian:bitbucket:5.16.8
-
cpe:2.3:a:atlassian:bitbucket:5.16.9
-
cpe:2.3:a:atlassian:bitbucket:5.2.0
-
cpe:2.3:a:atlassian:bitbucket:5.2.1
-
cpe:2.3:a:atlassian:bitbucket:5.2.2
-
cpe:2.3:a:atlassian:bitbucket:5.2.3
-
cpe:2.3:a:atlassian:bitbucket:5.2.4
-
cpe:2.3:a:atlassian:bitbucket:5.2.5
-
cpe:2.3:a:atlassian:bitbucket:5.2.6
-
cpe:2.3:a:atlassian:bitbucket:5.2.7
-
cpe:2.3:a:atlassian:bitbucket:5.2.8
-
cpe:2.3:a:atlassian:bitbucket:5.3.0
-
cpe:2.3:a:atlassian:bitbucket:5.3.1
-
cpe:2.3:a:atlassian:bitbucket:5.3.2
-
cpe:2.3:a:atlassian:bitbucket:5.3.3
-
cpe:2.3:a:atlassian:bitbucket:5.3.4
-
cpe:2.3:a:atlassian:bitbucket:5.3.5
-
cpe:2.3:a:atlassian:bitbucket:5.3.6
-
cpe:2.3:a:atlassian:bitbucket:5.3.7
-
cpe:2.3:a:atlassian:bitbucket:5.4.0
-
cpe:2.3:a:atlassian:bitbucket:5.4.1
-
cpe:2.3:a:atlassian:bitbucket:5.4.2
-
cpe:2.3:a:atlassian:bitbucket:5.4.3
-
cpe:2.3:a:atlassian:bitbucket:5.4.4
-
cpe:2.3:a:atlassian:bitbucket:5.4.6
-
cpe:2.3:a:atlassian:bitbucket:5.4.7
-
cpe:2.3:a:atlassian:bitbucket:5.4.8
-
cpe:2.3:a:atlassian:bitbucket:5.4.9
-
cpe:2.3:a:atlassian:bitbucket:5.5.0
-
cpe:2.3:a:atlassian:bitbucket:5.5.1
-
cpe:2.3:a:atlassian:bitbucket:5.5.2
-
cpe:2.3:a:atlassian:bitbucket:5.5.3
-
cpe:2.3:a:atlassian:bitbucket:5.5.4
-
cpe:2.3:a:atlassian:bitbucket:5.5.5
-
cpe:2.3:a:atlassian:bitbucket:5.5.6
-
cpe:2.3:a:atlassian:bitbucket:5.5.7
-
cpe:2.3:a:atlassian:bitbucket:5.5.8
-
cpe:2.3:a:atlassian:bitbucket:5.5.9
-
cpe:2.3:a:atlassian:bitbucket:5.6.0
-
cpe:2.3:a:atlassian:bitbucket:5.6.1
-
cpe:2.3:a:atlassian:bitbucket:5.6.11
-
cpe:2.3:a:atlassian:bitbucket:5.6.2
-
cpe:2.3:a:atlassian:bitbucket:5.6.3
-
cpe:2.3:a:atlassian:bitbucket:5.6.4
-
cpe:2.3:a:atlassian:bitbucket:5.6.5
-
cpe:2.3:a:atlassian:bitbucket:5.6.6
-
cpe:2.3:a:atlassian:bitbucket:5.7.0
-
cpe:2.3:a:atlassian:bitbucket:5.7.1
-
cpe:2.3:a:atlassian:bitbucket:5.7.2
-
cpe:2.3:a:atlassian:bitbucket:5.7.3
-
cpe:2.3:a:atlassian:bitbucket:5.7.4
-
cpe:2.3:a:atlassian:bitbucket:5.8.0
-
cpe:2.3:a:atlassian:bitbucket:5.8.1
-
cpe:2.3:a:atlassian:bitbucket:5.8.2
-
cpe:2.3:a:atlassian:bitbucket:5.8.3
-
cpe:2.3:a:atlassian:bitbucket:5.8.4
-
cpe:2.3:a:atlassian:bitbucket:5.9.0
-
cpe:2.3:a:atlassian:bitbucket:5.9.1
-
cpe:2.3:a:atlassian:bitbucket:5.9.2
-
cpe:2.3:a:atlassian:bitbucket:6.0.0
-
cpe:2.3:a:atlassian:bitbucket:6.0.1
-
cpe:2.3:a:atlassian:bitbucket:6.0.10
-
cpe:2.3:a:atlassian:bitbucket:6.0.11
-
cpe:2.3:a:atlassian:bitbucket:6.0.2
-
cpe:2.3:a:atlassian:bitbucket:6.0.3
-
cpe:2.3:a:atlassian:bitbucket:6.0.4
-
cpe:2.3:a:atlassian:bitbucket:6.0.5
-
cpe:2.3:a:atlassian:bitbucket:6.0.6
-
cpe:2.3:a:atlassian:bitbucket:6.0.7
-
cpe:2.3:a:atlassian:bitbucket:6.0.8
-
cpe:2.3:a:atlassian:bitbucket:6.0.9
-
cpe:2.3:a:atlassian:bitbucket:6.1.0
-
cpe:2.3:a:atlassian:bitbucket:6.1.1
-
cpe:2.3:a:atlassian:bitbucket:6.1.2
-
cpe:2.3:a:atlassian:bitbucket:6.1.3
-
cpe:2.3:a:atlassian:bitbucket:6.1.4
-
cpe:2.3:a:atlassian:bitbucket:6.1.5
-
cpe:2.3:a:atlassian:bitbucket:6.1.6
-
cpe:2.3:a:atlassian:bitbucket:6.1.7
-
cpe:2.3:a:atlassian:bitbucket:6.1.8
-
cpe:2.3:a:atlassian:bitbucket:6.1.9
-
cpe:2.3:a:atlassian:bitbucket:6.10.1
-
cpe:2.3:a:atlassian:bitbucket:6.10.2
-
cpe:2.3:a:atlassian:bitbucket:6.10.3
-
cpe:2.3:a:atlassian:bitbucket:6.10.9
-
cpe:2.3:a:atlassian:bitbucket:6.2.0
-
cpe:2.3:a:atlassian:bitbucket:6.2.1
-
cpe:2.3:a:atlassian:bitbucket:6.2.2
-
cpe:2.3:a:atlassian:bitbucket:6.2.3
-
cpe:2.3:a:atlassian:bitbucket:6.2.4
-
cpe:2.3:a:atlassian:bitbucket:6.2.5
-
cpe:2.3:a:atlassian:bitbucket:6.2.6
-
cpe:2.3:a:atlassian:bitbucket:6.2.7
-
cpe:2.3:a:atlassian:bitbucket:6.3.0
-
cpe:2.3:a:atlassian:bitbucket:6.3.1
-
cpe:2.3:a:atlassian:bitbucket:6.3.2
-
cpe:2.3:a:atlassian:bitbucket:6.3.3
-
cpe:2.3:a:atlassian:bitbucket:6.3.4
-
cpe:2.3:a:atlassian:bitbucket:6.3.5
-
cpe:2.3:a:atlassian:bitbucket:6.3.6
-
cpe:2.3:a:atlassian:bitbucket:6.4.0
-
cpe:2.3:a:atlassian:bitbucket:6.4.1
-
cpe:2.3:a:atlassian:bitbucket:6.4.2
-
cpe:2.3:a:atlassian:bitbucket:6.4.3
-
cpe:2.3:a:atlassian:bitbucket:6.4.4
-
cpe:2.3:a:atlassian:bitbucket:6.5.0
-
cpe:2.3:a:atlassian:bitbucket:6.5.1
-
cpe:2.3:a:atlassian:bitbucket:6.5.2
-
cpe:2.3:a:atlassian:bitbucket:6.5.3
-
cpe:2.3:a:atlassian:bitbucket:6.6.0
-
cpe:2.3:a:atlassian:bitbucket:6.6.1
-
cpe:2.3:a:atlassian:bitbucket:6.6.2
-
cpe:2.3:a:atlassian:bitbucket:6.6.3
-
cpe:2.3:a:atlassian:bitbucket:6.6.4
-
cpe:2.3:a:atlassian:bitbucket:6.7.0
-
cpe:2.3:a:atlassian:bitbucket:6.7.1
-
cpe:2.3:a:atlassian:bitbucket:6.7.2
-
cpe:2.3:a:atlassian:bitbucket:6.7.3
-
cpe:2.3:a:atlassian:bitbucket:6.7.4
-
cpe:2.3:a:atlassian:bitbucket:6.7.5
-
cpe:2.3:a:atlassian:bitbucket:6.8.0
-
cpe:2.3:a:atlassian:bitbucket:6.8.2
-
cpe:2.3:a:atlassian:bitbucket:6.8.3
-
cpe:2.3:a:atlassian:bitbucket:6.8.4
-
cpe:2.3:a:atlassian:bitbucket:6.9.0
-
cpe:2.3:a:atlassian:bitbucket:6.9.1
-
cpe:2.3:a:atlassian:bitbucket:6.9.2
-
cpe:2.3:a:atlassian:bitbucket:6.9.3
-
cpe:2.3:a:atlassian:bitbucket:7.0.0
-
cpe:2.3:a:atlassian:bitbucket:7.0.1
-
cpe:2.3:a:atlassian:bitbucket:7.0.2
-
cpe:2.3:a:atlassian:bitbucket:7.0.3
-
cpe:2.3:a:atlassian:bitbucket:7.0.4
-
cpe:2.3:a:atlassian:bitbucket:7.0.5
-
cpe:2.3:a:atlassian:bitbucket:7.1.0
-
cpe:2.3:a:atlassian:bitbucket:7.1.1
-
cpe:2.3:a:atlassian:bitbucket:7.1.2
-
cpe:2.3:a:atlassian:bitbucket:7.1.3
-
cpe:2.3:a:atlassian:bitbucket:7.1.4
-
cpe:2.3:a:atlassian:bitbucket:7.2.0
-
cpe:2.3:a:atlassian:bitbucket:7.2.1
-
cpe:2.3:a:atlassian:bitbucket:7.2.2
-
cpe:2.3:a:atlassian:bitbucket:7.2.3