CVE-2021-41306 — Atlassian / Jira Server

Description (CNA)

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view private project and filter names via an Insecure Direct Object References (IDOR) vulnerability in the Average Time in Status Gadget. The affected versions are before version 8.13.12, and from version 8.14.0 before 8.20.0.

Affected (CNA)

Vendor / product	Versions
Atlassian / Jira Server	affected unspecified before 8.13.12; affected 8.14.0 before unspecified; affected unspecified before 8.20.0
Atlassian / Jira Data Center	affected unspecified before 8.13.12; affected 8.14.0 before unspecified; affected unspecified before 8.20.0

CWE

No CWE identifiers supplied.

References

https://jira.atlassian.com/browse/JRASERVER-72915

ADP enrichment

CVE

No English description supplied.

https://jira.atlassian.com/browse/JRASERVER-72915

CISA-ADP

No English description supplied.

No references supplied.