Auth bypass in Atlassian Jira Data Center
CVE-2021-41312
Affected versions of Atlassian Jira Server and Data Center allow a remote attacker who has had their access revoked from Jira Service Management to enable and disable Issue Collectors on Jira Service Management projects via an Improper Aut…
Vulnerability class: Broken Authentication
EPSS: 0.003 (55.2th percentile) — read the EPSS interpretation.
Affected products
- Atlassian Jira Data Center — versions unspecified
- Atlassian Jira Server — versions unspecified
Weakness classification (CWE)
References
- jira.atlassian.com/browse/JRASERVER-72801 (x_refsource_MISC)