Description
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view import source configuration information via a Broken Access Control vulnerability in the Insight Import Source feature. The affected versions are before version 4.21.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Atlassian | Jira Service Management Server | unspecified – < 4.21.0 | 4.21.0 |
| Atlassian | Jira Service Management Data Center | unspecified – < 4.21.0 | 4.21.0 |