Auth bypass in Atlassian Jira Data Center

CVE-2021-41311

Affected versions of Atlassian Jira Server and Data Center allow attackers with access to an administrator account that has had its access revoked to modify projects' Users & Roles settings, via a Broken Authentication vulnerability in the…

Vulnerability class: Broken Authentication

EPSS: 0.002 (40.5th percentile) — read the EPSS interpretation.