CVE-2021-39121 — Atlassian / Jira Server

Description (CNA)

Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to enumerate the keys of private Jira projects via an Information Disclosure vulnerability in the /rest/api/latest/projectvalidate/key endpoint. The affected versions are before version 8.5.18, from version 8.6.0 before 8.13.10, and from version 8.14.0 before 8.18.2.

Affected (CNA)

Vendor / product	Versions
Atlassian / Jira Server	affected unspecified before 8.5.18; affected 8.6.0 before unspecified; affected unspecified before 8.13.10; affected 8.14.0 before unspecified; affected unspecified before 8.18.2
Atlassian / Jira Data Center	affected unspecified before 8.5.18; affected 8.6.0 before unspecified; affected unspecified before 8.13.10; affected 8.14.0 before unspecified; affected unspecified before 8.18.2

CWE

No CWE identifiers supplied.

References

https://jira.atlassian.com/browse/JRASERVER-72715

ADP enrichment

CVE

No English description supplied.

https://jira.atlassian.com/browse/JRASERVER-72715

CISA-ADP

No English description supplied.

No references supplied.