CVE-2021-39119 — Atlassian / Jira Server

Description (CNA)

Affected versions of Atlassian Jira Server and Data Center allow users who have watched an issue to continue receiving updates on the issue even after their Jira account is revoked, via a Broken Access Control vulnerability in the issue notification feature. The affected versions are before version 8.19.0.

Affected (CNA)

Vendor / product	Versions
Atlassian / Jira Server	affected unspecified before 8.19.0
Atlassian / Jira Data Center	affected unspecified before 8.19.0

CWE

No CWE identifiers supplied.

References

https://jira.atlassian.com/browse/JRASERVER-72737

ADP enrichment

CVE

No English description supplied.

https://jira.atlassian.com/browse/JRASERVER-72737

CISA-ADP

No English description supplied.

No references supplied.