Vulnerability in Atlassian Crucible
CVE-2021-43958
Various rest resources in Fisheye and Crucible before version 4.8.9 allowed remote attackers to brute force user login credentials as rest resources did not check if users were beyond their max failed login limits and therefore required so…
EPSS: 0.013 (79.9th percentile) — read the EPSS interpretation.
Affected products
- Atlassian Crucible — versions unspecified
- Atlassian Fisheye — versions unspecified
References
- jira.atlassian.com/browse/FE-7387 (x_refsource_MISC)
- jira.atlassian.com/browse/CRUC-8523 (x_refsource_MISC)