Skip to content
OpenAdvisories
Unscored CVE-2021-43949 EUVD-2021-30811GHSA-6v7j-h4h2-4p86

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view private objects …

Published Jan 10, 2022 · Updated Oct 4, 2024 · Assigned by atlassian

Vendor: Atlassian Product: Jira Service Management Data Center Product: Jira Service Management Server Category: Web / CMS

Description

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view private objects via a Broken Access Control vulnerability in the Custom Fields feature. The affected versions are before version 4.21.0.

Affected products

VendorProductAffectedFixed
Atlassian Jira Service Management Server unspecified – < 4.21.0 4.21.0
Atlassian Jira Service Management Data Center unspecified – < 4.21.0 4.21.0

References