vulnerability
Atlassian JIRA: Improper Authentication (CVE-2021-41308)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:L/Au:S/C:N/I:P/A:N) | Oct 26, 2021 | Dec 7, 2021 | Dec 7, 2021 |
Severity
4
CVSS
(AV:N/AC:L/Au:S/C:N/I:P/A:N)
Published
Oct 26, 2021
Added
Dec 7, 2021
Modified
Dec 7, 2021
Description
Affected versions of Atlassian Jira Server and Data Center allow authenticated yet non-administrator remote attackers to edit the File Replication settings via a Broken Access Control vulnerability in the `ReplicationSettings!default.jspa` endpoint. The affected versions are before version 8.6.0, from version 8.7.0 before 8.13.12, and from version 8.14.0 before 8.20.1.
Solution(s)
atlassian-jira-upgrade-8_13_12atlassian-jira-upgrade-8_20_1atlassian-jira-upgrade-8_6_0
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.