CVE-2021-43948 — Atlassian / Jira Service Management Server

Description (CNA)

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view the names of private objects via an Improper Authorization vulnerability in the "Move objects" feature. The affected versions are before version 4.21.0.

Affected (CNA)

Vendor / product	Versions
Atlassian / Jira Service Management Server	affected unspecified before 4.21.0
Atlassian / Jira Service Management Data Center	affected unspecified before 4.21.0

CWE

No CWE identifiers supplied.

References

https://jira.atlassian.com/browse/JSDSERVER-10981

ADP enrichment

CVE

No English description supplied.

https://jira.atlassian.com/browse/JSDSERVER-10981

CISA-ADP

No English description supplied.

No references supplied.