CVE-2021-39125 — Atlassian / Jira Server

Description (CNA)

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to discover the usernames of users via an enumeration vulnerability in the password reset page. The affected versions are before version 8.5.10, and from version 8.6.0 before 8.13.1.

Affected (CNA)

Vendor / product	Versions
Atlassian / Jira Server	affected unspecified before 8.5.10; affected 8.6.0 before unspecified; affected unspecified before 8.13.1
Atlassian / Jira Data Center	affected unspecified before 8.5.10; affected 8.6.0 before unspecified; affected unspecified before 8.13.1

CWE

No CWE identifiers supplied.

References

https://jira.atlassian.com/browse/JRASERVER-72009

ADP enrichment

CVE

No English description supplied.

https://jira.atlassian.com/browse/JRASERVER-72009

CISA-ADP

No English description supplied.

No references supplied.