CVE-2021-41309 — Atlassian / Jira Server

Description (CNA)

Affected versions of Atlassian Jira Server and Data Center allow a user who has had their Jira Service Management access revoked to export audit logs of another user's Jira Service Management project via a Broken Authentication vulnerability in the /plugins/servlet/audit/resource endpoint. The affected versions of Jira Server and Data Center are before version 8.19.1.

Affected (CNA)

Vendor / product	Versions
Atlassian / Jira Server	affected unspecified before 8.19.1
Atlassian / Jira Data Center	affected unspecified before 8.19.1

CWE

CWE-287

References

https://jira.atlassian.com/browse/JRASERVER-72803

ADP enrichment

CVE

No English description supplied.

https://jira.atlassian.com/browse/JRASERVER-72803

CISA-ADP

No English description supplied.

No references supplied.