CVE-2021-41311 — Atlassian / Jira Server

Description (CNA)

Affected versions of Atlassian Jira Server and Data Center allow attackers with access to an administrator account that has had its access revoked to modify projects' Users & Roles settings, via a Broken Authentication vulnerability in the /plugins/servlet/project-config/PROJECT/roles endpoint. The affected versions are before version 8.19.1.

Affected (CNA)

Vendor / product	Versions
Atlassian / Jira Server	affected unspecified before 8.19.1
Atlassian / Jira Data Center	affected unspecified before 8.19.1

CWE

CWE-287

References

https://jira.atlassian.com/browse/JRASERVER-72802

ADP enrichment

CVE

No English description supplied.

https://jira.atlassian.com/browse/JRASERVER-72802

CISA-ADP

No English description supplied.

No references supplied.